[gnome-build-meta/abderrahim/test-needs] test release




commit b1bbdc0f1ee9b2bcd6d8e3b21a22588d227acbe9
Author: Abderrahim Kitouni <akitouni gnome org>
Date:   Wed Apr 28 19:32:04 2021 +0100

    test release

 .gitlab-ci.yml                                     |  92 ++++----
 elements/core-deps/LibRaw.bst                      |   1 +
 elements/core-deps/LibVNCServer.bst                |   1 +
 elements/core-deps/ModemManager.bst                |   3 +-
 elements/core-deps/NetworkManager.bst              |   3 +-
 elements/core-deps/accountsservice.bst             |   1 +
 elements/core-deps/appstream.bst                   |   1 +
 elements/core-deps/atkmm-1.6.bst                   |   6 +-
 elements/core-deps/babl.bst                        |   1 +
 elements/core-deps/berkeleydb.bst                  |   1 +
 elements/core-deps/boost.bst                       |   1 +
 elements/core-deps/cairomm-1.0.bst                 |   1 +
 elements/core-deps/clutter-gst.bst                 |   1 +
 elements/core-deps/clutter-gtk.bst                 |   1 +
 elements/core-deps/clutter.bst                     |   1 +
 elements/core-deps/cogl.bst                        |   6 +-
 elements/core-deps/colord-gtk.bst                  |   1 +
 elements/core-deps/colord.bst                      |   1 +
 elements/core-deps/cups-pk-helper.bst              |   1 +
 elements/core-deps/dconf.bst                       |   7 +-
 elements/core-deps/dnsmasq.bst                     |   6 +-
 elements/core-deps/dotconf.bst                     |   1 +
 elements/core-deps/ebtables.bst                    |   1 +
 elements/core-deps/eos-updater.bst                 |   1 +
 elements/core-deps/espeak.bst                      |   1 +
 elements/core-deps/evolution-data-server.bst       |   7 +-
 elements/core-deps/exempi.bst                      |   1 +
 elements/core-deps/exiv2.bst                       |   1 +
 elements/core-deps/flatpak-builder.bst             |   1 +
 elements/core-deps/flatpak.bst                     |   1 +
 elements/core-deps/folks.bst                       |   7 +-
 elements/core-deps/freerdp.bst                     |   1 +
 elements/core-deps/fwupd.bst                       |   1 +
 elements/core-deps/gegl.bst                        |   1 +
 elements/core-deps/geocode-glib.bst                |   7 +-
 elements/core-deps/gexiv2.bst                      |   1 +
 elements/core-deps/gfbgraph.bst                    |   6 +-
 elements/core-deps/glib-testing.bst                |   1 +
 elements/core-deps/glibmm-2.4.bst                  |   6 +-
 elements/core-deps/gmime.bst                       |   6 +-
 elements/core-deps/gnome-autoar.bst                |   6 +-
 elements/core-deps/gnome-online-accounts.bst       |   7 +-
 elements/core-deps/gnome-online-miners.bst         |   6 +-
 elements/core-deps/gnome-video-effects.bst         |   6 +-
 elements/core-deps/gom.bst                         |   6 +-
 elements/core-deps/graphviz.bst                    |   1 +
 elements/core-deps/grilo-plugins.bst               |   6 +-
 elements/core-deps/grilo.bst                       |   6 +-
 elements/core-deps/gsound.bst                      |   6 +-
 elements/core-deps/gspell.bst                      |   7 +-
 elements/core-deps/gssdp.bst                       |   6 +-
 elements/core-deps/gst-editing-services.bst        |   1 +
 elements/core-deps/gtk-vnc.bst                     |  11 +-
 elements/core-deps/gtkmm-3.bst                     |   6 +-
 elements/core-deps/gupnp-av.bst                    |   7 +-
 elements/core-deps/gupnp-dlna.bst                  |   7 +-
 elements/core-deps/gupnp.bst                       |   7 +-
 elements/core-deps/intltool.bst                    |   1 +
 elements/core-deps/jsonrpc-glib.bst                |   6 +-
 elements/core-deps/libbluray.bst                   |   3 +-
 elements/core-deps/libcacard.bst                   |   1 +
 elements/core-deps/libcanberra.bst                 |   1 +
 elements/core-deps/libcap-ng.bst                   |   1 +
 elements/core-deps/libcdio-paranoia.bst            |   1 +
 elements/core-deps/libcdio.bst                     |   1 +
 elements/core-deps/libchamplain.bst                |   7 +-
 elements/core-deps/libcue.bst                      |   1 +
 elements/core-deps/libdazzle.bst                   |   6 +-
 elements/core-deps/libdvdread.bst                  |   3 +-
 elements/core-deps/libgdata.bst                    |   6 +-
 elements/core-deps/libgit2-glib.bst                |   6 +-
 elements/core-deps/libgit2.bst                     |   1 +
 elements/core-deps/libgnomekbd.bst                 |   7 +-
 elements/core-deps/libgphoto2.bst                  |   1 +
 elements/core-deps/libgsf.bst                      |   6 +-
 elements/core-deps/libgtop.bst                     |   6 +-
 elements/core-deps/libgusb.bst                     |   1 +
 elements/core-deps/libgweather.bst                 |   1 +
 elements/core-deps/libgxps.bst                     |   7 +-
 elements/core-deps/libimobiledevice.bst            |   1 +
 elements/core-deps/libinput.bst                    |   1 +
 elements/core-deps/libjcat.bst                     |   1 +
 elements/core-deps/libmbim.bst                     |   1 +
 elements/core-deps/libmediaart.bst                 |   6 +-
 elements/core-deps/libmtp.bst                      |   1 +
 elements/core-deps/libmusicbrainz.bst              |   1 +
 elements/core-deps/libnfs.bst                      |   1 +
 elements/core-deps/libnma.bst                      |   7 +-
 elements/core-deps/liboauth.bst                    |   1 +
 elements/core-deps/libosinfo.bst                   |   1 +
 elements/core-deps/libostree.bst                   |   1 +
 elements/core-deps/libpeas.bst                     |   6 +-
 elements/core-deps/libqmi.bst                      |   1 +
 elements/core-deps/libsigcplusplus-2.0.bst         |   6 +-
 elements/core-deps/libssh2.bst                     |   1 +
 elements/core-deps/libusbmuxd.bst                  |   1 +
 elements/core-deps/libvirt-glib.bst                |   1 +
 elements/core-deps/libvirt.bst                     |   1 +
 elements/core-deps/libxklavier.bst                 |   1 +
 elements/core-deps/lmdb.bst                        |   1 +
 elements/core-deps/malcontent.bst                  |   1 +
 elements/core-deps/mm-common.bst                   |   6 +-
 .../core-deps/mobile-broadband-provider-info.bst   |   6 +-
 elements/core-deps/mogwai.bst                      |   1 +
 elements/core-deps/mpc.bst                         |   1 +
 elements/core-deps/neon.bst                        |   1 +
 elements/core-deps/openldap.bst                    |   1 +
 elements/core-deps/osinfo-db-tools.bst             |   1 +
 elements/core-deps/osinfo-db.bst                   |   3 +-
 elements/core-deps/pangomm-1.4.bst                 |   6 +-
 elements/core-deps/parted.bst                      |   1 +
 elements/core-deps/perl-parse-yapp.bst             |   1 +
 elements/core-deps/phodav.bst                      |   6 +-
 elements/core-deps/plist.bst                       |   1 +
 elements/core-deps/plymouth.bst                    |   1 +
 elements/core-deps/portablexdr.bst                 |   1 +
 elements/core-deps/portaudio.bst                   |   1 +
 elements/core-deps/power-profiles-daemon.bst       |   1 +
 elements/core-deps/ppp.bst                         |   4 +-
 elements/core-deps/pyatspi.bst                     |   6 +-
 elements/core-deps/pycups.bst                      |   1 +
 elements/core-deps/python-pyparsing.bst            |   1 +
 elements/core-deps/qemu.bst                        |   1 +
 elements/core-deps/rpcsvc-proto.bst                |   1 +
 elements/core-deps/samba.bst                       |   5 +-
 elements/core-deps/sane-backends.bst               |   4 +-
 elements/core-deps/slirp-helper.bst                | 260 +++++++++++++++++++++
 elements/core-deps/speech-dispatcher.bst           |   1 +
 elements/core-deps/spice-gtk.bst                   |   1 +
 elements/core-deps/spice-protocol.bst              |   1 +
 elements/core-deps/spice.bst                       |   1 +
 elements/core-deps/startup-notification.bst        |   1 +
 elements/core-deps/system-config-printer.bst       |   9 +-
 elements/core-deps/template-glib.bst               |   6 +-
 elements/core-deps/totem-pl-parser.bst             |   6 +-
 elements/core-deps/tracker-2.bst                   |   6 +-
 elements/core-deps/tracker-miners-2.bst            |   6 +-
 elements/core-deps/tracker-miners.bst              |   6 +-
 elements/core-deps/udisks2.bst                     |   1 +
 elements/core-deps/uhttpmock.bst                   |   1 +
 elements/core-deps/upower.bst                      |   1 +
 elements/core-deps/usbredir.bst                    |   3 +-
 elements/core-deps/vte.bst                         |   7 +-
 elements/core-deps/xdg-desktop-portal-gtk.bst      |   1 +
 elements/core-deps/xdg-sound-theme.bst             |   1 +
 elements/core-deps/xmlb.bst                        |   1 +
 elements/core/baobab.bst                           |   6 +-
 elements/core/cheese.bst                           |   7 +-
 elements/core/dconf-editor.bst                     |   7 +-
 elements/core/devhelp.bst                          |   7 +-
 elements/core/eog.bst                              |   6 +-
 elements/core/epiphany.bst                         |   6 +-
 elements/core/evince.bst                           |   7 +-
 elements/core/gdm.bst                              |   6 +-
 elements/core/gedit.bst                            |  11 +-
 elements/core/gnome-backgrounds.bst                |   6 +-
 elements/core/gnome-bluetooth.bst                  |   7 +-
 elements/core/gnome-boxes.bst                      |  13 +-
 elements/core/gnome-builder.bst                    |   6 +-
 elements/core/gnome-calculator.bst                 |   6 +-
 elements/core/gnome-calendar.bst                   |   7 +-
 elements/core/gnome-characters.bst                 |   6 +-
 elements/core/gnome-clocks.bst                     |   6 +-
 elements/core/gnome-color-manager.bst              |   6 +-
 elements/core/gnome-contacts.bst                   |   6 +-
 elements/core/gnome-control-center.bst             |  11 +-
 elements/core/gnome-desktop.bst                    |   7 +-
 elements/core/gnome-disk-utility.bst               |   6 +-
 elements/core/gnome-font-viewer.bst                |   6 +-
 elements/core/gnome-initial-setup.bst              |   9 +-
 elements/core/gnome-keyring.bst                    |   6 +-
 elements/core/gnome-logs.bst                       |   6 +-
 elements/core/gnome-maps.bst                       |   6 +-
 elements/core/gnome-menus.bst                      |   6 +-
 elements/core/gnome-music.bst                      |  17 +-
 elements/core/gnome-photos.bst                     |  10 +-
 elements/core/gnome-remote-desktop.bst             |   7 +-
 elements/core/gnome-screenshot.bst                 |   6 +-
 elements/core/gnome-session.bst                    |   7 +-
 elements/core/gnome-settings-daemon.bst            |  11 +-
 elements/core/gnome-shell-extensions.bst           |   6 +-
 elements/core/gnome-shell.bst                      |  11 +-
 elements/core/gnome-software.bst                   |   6 +-
 elements/core/gnome-system-monitor.bst             |   6 +-
 elements/core/gnome-terminal.bst                   |   7 +-
 elements/core/gnome-tour.bst                       |   7 +-
 elements/core/gnome-user-docs.bst                  |   6 +-
 elements/core/gnome-user-share.bst                 |   7 +-
 elements/core/gnome-weather.bst                    |   6 +-
 elements/core/mutter.bst                           |   7 +-
 elements/core/nautilus.bst                         |  10 +-
 elements/core/orca.bst                             |   6 +-
 elements/core/rygel.bst                            |   7 +-
 elements/core/simple-scan.bst                      |   6 +-
 elements/core/sushi.bst                            |   6 +-
 elements/core/sysprof.bst                          |   7 +-
 elements/core/totem.bst                            |  13 +-
 elements/freedesktop-sdk.bst                       |   1 +
 elements/iso/eos-installer.bst                     |   1 +
 elements/iso/isomd5sum.bst                         |   1 +
 elements/iso/libburn.bst                           |   1 +
 elements/iso/libisoburn.bst                        |   1 +
 elements/iso/libisofs.bst                          |   1 +
 elements/openh264-extension.bst                    |   1 +
 elements/sdk-deps/bubblewrap.bst                   |   1 +
 elements/sdk-deps/gvfs.bst                         |   7 +-
 elements/sdk-deps/ibus.bst                         |   1 +
 elements/sdk-deps/libsass.bst                      |   1 +
 elements/sdk-deps/sassc.bst                        |   1 +
 elements/sdk-deps/xdg-dbus-proxy.bst               |   1 +
 elements/sdk/adobe-source-code-pro-fonts.bst       |   1 +
 elements/sdk/adwaita-icon-theme.bst                |   6 +-
 elements/sdk/appstream-glib.bst                    |   7 +-
 elements/sdk/at-spi2-atk.bst                       |   6 +-
 elements/sdk/at-spi2-core.bst                      |   6 +-
 elements/sdk/atk.bst                               |   6 +-
 elements/sdk/cantarell-fonts.bst                   |   1 +
 elements/sdk/enchant-2.bst                         |   1 +
 elements/sdk/fcitx.bst                             |   1 +
 elements/sdk/gcab.bst                              |   6 +-
 elements/sdk/gcr.bst                               |   7 +-
 elements/sdk/gdk-pixbuf.bst                        |   6 +-
 elements/sdk/geoclue.bst                           |   1 +
 elements/sdk/gjs.bst                               |   6 +-
 elements/sdk/glib-networking.bst                   |   6 +-
 elements/sdk/glib.bst                              |   7 +-
 elements/sdk/gobject-introspection.bst             |   6 +-
 elements/sdk/graphene.bst                          |   7 +-
 elements/sdk/gsettings-desktop-schemas.bst         |   7 +-
 elements/sdk/gtk+-3.bst                            |   7 +-
 elements/sdk/gtk-doc.bst                           |   6 +-
 elements/sdk/gtk.bst                               |   7 +-
 elements/sdk/gtksourceview.bst                     |   7 +-
 elements/sdk/json-glib.bst                         |   6 +-
 elements/sdk/krb5.bst                              |   1 +
 elements/sdk/libgee.bst                            |   6 +-
 elements/sdk/libhandy.bst                          |   6 +-
 elements/sdk/libnotify.bst                         |   7 +-
 elements/sdk/librest.bst                           |   6 +-
 elements/sdk/librsvg.bst                           |   7 +-
 elements/sdk/libsecret.bst                         |   6 +-
 elements/sdk/libsoup-2.4.bst                       |   7 +-
 elements/sdk/libsoup.bst                           |   7 +-
 elements/sdk/libwpe.bst                            |   1 +
 elements/sdk/pango.bst                             |   6 +-
 elements/sdk/pinentry.bst                          |   1 +
 elements/sdk/pygobject.bst                         |   6 +-
 elements/sdk/tracker.bst                           |   6 +-
 elements/sdk/vala-tarball.bst                      |   1 +
 elements/sdk/vala.bst                              |   6 +-
 elements/sdk/webkitgtk.bst                         |   1 +
 elements/sdk/woff2.bst                             |   1 +
 elements/sdk/wpebackend-fdo.bst                    |   3 +-
 elements/sdk/yelp-tools.bst                        |   6 +-
 elements/sdk/yelp-xsl.bst                          |   6 +-
 elements/sdk/yelp.bst                              |   6 +-
 elements/sdk/zenity.bst                            |   6 +-
 elements/vm/android-udev-rules.bst                 |   7 +-
 elements/vm/buildstream/arpy.bst                   |   1 +
 elements/vm/buildstream/breezy.bst                 |   1 +
 elements/vm/buildstream/bst-external.bst           |   1 +
 elements/vm/buildstream/buildstream.bst            |   1 +
 elements/vm/buildstream/click.bst                  |   1 +
 elements/vm/buildstream/grpcio.bst                 |   1 +
 elements/vm/buildstream/pluginbase.bst             |   1 +
 elements/vm/buildstream/protobuf.bst               |   1 +
 elements/vm/buildstream/psutil.bst                 |   1 +
 elements/vm/buildstream/pytest-runner.bst          |   1 +
 elements/vm/buildstream/python3-configobj.bst      |   1 +
 elements/vm/buildstream/python3-dulwich.bst        |   1 +
 elements/vm/buildstream/python3-fastimport.bst     |   1 +
 elements/vm/buildstream/python3-markupsafe.bst     |   1 +
 elements/vm/buildstream/pytoml.bst                 |   1 +
 elements/vm/buildstream/ruamel-yaml-clib.bst       |   1 +
 elements/vm/buildstream/ruamel-yaml.bst            |   1 +
 elements/vm/buildstream/ujson.bst                  |   1 +
 elements/vm/eos-repartition.bst                    |   1 +
 elements/vm/fish.bst                               |   1 +
 elements/vm/flathub-config.bst                     |   1 +
 elements/vm/git-lfs.bst                            |   1 +
 elements/vm/gnome-nightly-config.bst               |   1 +
 elements/vm/nss-mdns.bst                           |   1 +
 elements/vm/ntfs-3g.bst                            |   1 +
 elements/vm/plymouth-gnome-theme.bst               |   1 +
 elements/vm/qemu-tools.bst                         |   1 +
 elements/vm/spice-vdagent.bst                      |   1 +
 elements/vm/toolbox.bst                            |  17 ++
 elements/vm/uresourced.bst                         |   1 +
 junction.refs                                      |   6 -
 project.conf                                       |   6 +-
 290 files changed, 907 insertions(+), 580 deletions(-)
---
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index de802982..2f1d66c2 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -2,11 +2,11 @@ include: .gitlab-ci/arch.yml
 
 variables:
   GET_SOURCES_ATTEMPTS: 3
-  BST_STRICT: '--no-strict'
+  BST_STRICT: '--strict'
   BST_TRACK_TAGS: 'false'
   BST_NO_PUSH: "bst $BST_STRICT --config .gitlab-ci/buildstream-nopush.conf --log-file logs/build.log 
--colors"
   BST: "bst $BST_STRICT --config .gitlab-ci/buildstream.conf --log-file logs/build.log --colors"
-  FLATPAK_BRANCH: master
+  FLATPAK_BRANCH: 41alpha
 
 stages:
 - track
@@ -31,8 +31,8 @@ default:
 .build-template:
   stage: build
   needs:
-    - job: 'track'
-      optional: true
+  - job: 'track'
+    optional: true
   interruptible: true
   script:
   - TARGETS=(core.bst flatpak-runtimes.bst flatpak-platform-extensions.bst flatpak/platform-manifest.bst 
flatpak/sdk-manifest.bst)
@@ -60,8 +60,8 @@ default:
 .manual-image-template:
   stage: deploy
   needs:
-    - job: 'track'
-      optional: true
+  - job: 'track'
+    optional: true
   when: manual
   allow_failure: true
   script:
@@ -84,8 +84,8 @@ default:
   extends: .deploy-rules
   stage: deploy
   needs:
-    - job: 'track'
-      optional: true
+  - job: 'track'
+    optional: true
   script:
   - |
     export FLAT_MANAGER_SERVER=https://flatmgr-ostree.openshift.gnome.org/
@@ -158,16 +158,16 @@ generate-deploy-config:
   - .x86_64
   - .deploy-rules
   needs:
-    - job: 'track'
-      optional: true
-    - job: 'build-x86_64'
-      artifacts: false
-    - job: 'build-i386'
-      artifacts: false
-    - job: 'build-aarch64'
-      artifacts: false
-    - job: 'build-ppc64le'
-      artifacts: false
+  - job: 'track'
+    optional: true
+  - job: 'build-x86_64'
+    artifacts: false
+  - job: 'build-i386'
+    artifacts: false
+  - job: 'build-aarch64'
+    artifacts: false
+  - job: 'build-ppc64le'
+    artifacts: false
   stage: deploy-config
   script:
   - test -f track-job.id && TRACK_JOB_ID=$(cat track-job.id)
@@ -237,10 +237,10 @@ vm-image-x86_64:
   - .manual-image-template
   - .x86_64
   needs:
-    - job: 'track'
-      optional: true
-    - job: 'build-x86_64'
-      artifacts: false
+  - job: 'track'
+    optional: true
+  - job: 'build-x86_64'
+    artifacts: false
   variables:
     IMAGE: vm/image.bst
 
@@ -249,10 +249,10 @@ vm-image-x86_64:
   - .manual-image-template
   - .aarch64
   needs:
-    - job: 'track'
-      optional: true
-    - job: 'build-aarch64'
-      artifacts: false
+  - job: 'track'
+    optional: true
+  - job: 'build-aarch64'
+    artifacts: false
   variables:
     IMAGE: boards/pinebook-pro/image.bst
 
@@ -261,10 +261,10 @@ rock64-image:
   - .manual-image-template
   - .aarch64
   needs:
-    - job: 'track'
-      optional: true
-    - job: 'build-aarch64'
-      artifacts: false
+  - job: 'track'
+    optional: true
+  - job: 'build-aarch64'
+    artifacts: false
   variables:
     IMAGE: boards/rock64/image.bst
 
@@ -273,10 +273,10 @@ raspberrypi-4-image:
   - .manual-image-template
   - .aarch64
   needs:
-    - job: 'track'
-      optional: true
-    - job: 'build-aarch64'
-      artifacts: false
+  - job: 'track'
+    optional: true
+  - job: 'build-aarch64'
+    artifacts: false
   variables:
     IMAGE: boards/raspberrypi-4/image.bst
 
@@ -287,19 +287,19 @@ iso-installer-x86_64:
   variables:
     IMAGE: iso/image.bst
   needs:
-    - job: 'track'
-      optional: true
-    - job: 'build-x86_64'
-      artifacts: false
+  - job: 'track'
+    optional: true
+  - job: 'build-x86_64'
+    artifacts: false
 
 s3-image:
   extends: .x86_64
   stage: deploy
   needs:
-    - job: 'track'
-      optional: true
-    - job: 'build-x86_64'
-      artifacts: false
+  - job: 'track'
+    optional: true
+  - job: 'build-x86_64'
+    artifacts: false
   script:
   - ${BST_NO_PUSH} --max-jobs $(( $(nproc) / 4 )) -o arch "${ARCH}" build vm/image.bst iso/image.bst
   - ${BST} -o arch "${ARCH}" checkout --hardlinks vm/image.bst image
@@ -355,10 +355,10 @@ cve_report:
   extends: .x86_64
   stage: reports
   needs:
-    - job: 'track'
-      optional: true
-    - job: 'vm-image-x86_64'
-      artifacts: false
+  - job: 'track'
+    optional: true
+  - job: 'vm-image-x86_64'
+    artifacts: false
   script:
   - ${BST} pull flatpak/platform-manifest.bst flatpak/sdk-manifest.bst
 
diff --git a/elements/core-deps/LibRaw.bst b/elements/core-deps/LibRaw.bst
index db554ee3..3acb6738 100644
--- a/elements/core-deps/LibRaw.bst
+++ b/elements/core-deps/LibRaw.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://www.libraw.org/data/LibRaw-0.19.5.tar.gz
 
+  ref: 40a262d7cc71702711a0faec106118ee004f86c86cc228281d12d16da03e02f5
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/core-deps/LibVNCServer.bst b/elements/core-deps/LibVNCServer.bst
index f5eeb7f1..f0e04cba 100644
--- a/elements/core-deps/LibVNCServer.bst
+++ b/elements/core-deps/LibVNCServer.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://github.com/LibVNC/libvncserver/archive/LibVNCServer-0.9.13.tar.gz
 
+  ref: 0ae5bb9175dc0a602fe85c1cf591ac47ee5247b87f2bf164c16b05f87cbfa81a
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
 
diff --git a/elements/core-deps/ModemManager.bst b/elements/core-deps/ModemManager.bst
index cf3f26d7..0048d7c3 100644
--- a/elements/core-deps/ModemManager.bst
+++ b/elements/core-deps/ModemManager.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: https://www.freedesktop.org/software/ModemManager/ModemManager-1.16.2.tar.xz
+  url: https://www.freedesktop.org/software/ModemManager/ModemManager-1.16.4.tar.xz
+  ref: 167e60b26fa05887f87a0b3fb54143d7845e6e4d8c2f2dd93afac059f41e7edf
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/NetworkManager.bst b/elements/core-deps/NetworkManager.bst
index 6271bfcc..0d7538e5 100644
--- a/elements/core-deps/NetworkManager.bst
+++ b/elements/core-deps/NetworkManager.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:NetworkManager/1.31/NetworkManager-1.31.1.tar.xz
+  url: gnome_downloads:NetworkManager/1.31/NetworkManager-1.31.3.tar.xz
+  ref: 59a153f5b938e84f03541afc94795454177e29177a35cb6b8fd2506ab75890d3
 build-depends:
 - core-deps/intltool.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/accountsservice.bst b/elements/core-deps/accountsservice.bst
index 548be401..8ccb4e06 100644
--- a/elements/core-deps/accountsservice.bst
+++ b/elements/core-deps/accountsservice.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: https://www.freedesktop.org/software/accountsservice/accountsservice-0.6.55.tar.xz
+  ref: ff2b2419a7e06bd9cb335ffe391c7409b49a0f0130b890bd54692a3986699c9b
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/core-deps/appstream.bst b/elements/core-deps/appstream.bst
index d18b70f2..dc82fdcf 100644
--- a/elements/core-deps/appstream.bst
+++ b/elements/core-deps/appstream.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://www.freedesktop.org/software/appstream/releases/AppStream-0.14.0.tar.xz
 
+  ref: 29eb617599eefec0b63c2894446e8cf7c5717f0285bab5df19fa53a2d5eecd16
 build-depends:
 - sdk/gobject-introspection.bst
 - freedesktop-sdk.bst:components/docbook-xsl.bst
diff --git a/elements/core-deps/atkmm-1.6.bst b/elements/core-deps/atkmm-1.6.bst
index 9f484b1c..4922a9fe 100644
--- a/elements/core-deps/atkmm-1.6.bst
+++ b/elements/core-deps/atkmm-1.6.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/atkmm.git
-  track: atkmm-2-28
+- kind: tar
+  url: gnome_downloads:atkmm/2.28/atkmm-2.28.1.tar.xz
+  ref: 116876604770641a450e39c1f50302884848ce9cc48d43c5dc8e8efc31f31bad
 build-depends:
 - core-deps/mm-common.bst
 - freedesktop-sdk.bst:components/m4.bst
diff --git a/elements/core-deps/babl.bst b/elements/core-deps/babl.bst
index 19b0caca..dd3ac9bf 100644
--- a/elements/core-deps/babl.bst
+++ b/elements/core-deps/babl.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://download.gimp.org/pub/babl/0.1/babl-0.1.86.tar.xz
 
+  ref: 0b3f595159ad1b216cd729c0504c3a5f6cf780c641f4dc63fc164f3c0382c8f0
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/core-deps/berkeleydb.bst b/elements/core-deps/berkeleydb.bst
index aba5cd73..e6ae0262 100644
--- a/elements/core-deps/berkeleydb.bst
+++ b/elements/core-deps/berkeleydb.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://http.debian.net/debian/pool/main/d/db5.3/db5.3_5.3.28.orig.tar.xz
+  ref: e1f85c8b6ebd0ed3ca72fa0ae97b65006f6d0bd0cd6f4ac24bed103cb5497bf5
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/boost.bst b/elements/core-deps/boost.bst
index b3373ab0..4e5be90d 100644
--- a/elements/core-deps/boost.bst
+++ b/elements/core-deps/boost.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://dl.bintray.com/boostorg/release/1.75.0/source/boost_1_75_0.tar.bz2
 
+  ref: 953db31e016db7bb207f11432bef7df100516eeb746843fa0486a222e3fd49cb
 depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
 
diff --git a/elements/core-deps/cairomm-1.0.bst b/elements/core-deps/cairomm-1.0.bst
index 5dda69c5..b6c9a5cd 100644
--- a/elements/core-deps/cairomm-1.0.bst
+++ b/elements/core-deps/cairomm-1.0.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: cairo_org:releases/cairomm-1.14.2.tar.xz
+  ref: 0126b9cc295dc36bc9c0860d5b720cb5469fd78d5620c8f10cc5f0c07b928de3
 build-depends:
 - core-deps/mm-common.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/clutter-gst.bst b/elements/core-deps/clutter-gst.bst
index c5e0c9ca..8082a89b 100644
--- a/elements/core-deps/clutter-gst.bst
+++ b/elements/core-deps/clutter-gst.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:clutter-gst/3.0/clutter-gst-3.0.27.tar.xz
+  ref: fe69bd6c659d24ab30da3f091eb91cd1970026d431179b0724f13791e8ad9f9d
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/clutter-gtk.bst b/elements/core-deps/clutter-gtk.bst
index 5d0f8a02..772230a1 100644
--- a/elements/core-deps/clutter-gtk.bst
+++ b/elements/core-deps/clutter-gtk.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: gnome_downloads:clutter-gtk/1.8/clutter-gtk-1.8.4.tar.xz
 
+  ref: 521493ec038973c77edcb8bc5eac23eed41645117894aaee7300b2487cb42b06
 build-depends:
 - sdk/gobject-introspection.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/clutter.bst b/elements/core-deps/clutter.bst
index b12639db..03a5ed36 100644
--- a/elements/core-deps/clutter.bst
+++ b/elements/core-deps/clutter.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:clutter/1.26/clutter-1.26.4.tar.xz
+  ref: 8b48fac159843f556d0a6be3dbfc6b083fc6d9c58a20a49a6b4919ab4263c4e6
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/cogl.bst b/elements/core-deps/cogl.bst
index 1ca6d1b0..d395d6c7 100644
--- a/elements/core-deps/cogl.bst
+++ b/elements/core-deps/cogl.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/cogl.git
-  track: cogl-1.22
+- kind: tar
+  url: gnome_downloads:cogl/1.22/cogl-1.22.8.tar.xz
+  ref: a805b2b019184710ff53d0496f9f0ce6dcca420c141a0f4f6fcc02131581d759
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/colord-gtk.bst b/elements/core-deps/colord-gtk.bst
index 3b1b56c2..4c77c37d 100644
--- a/elements/core-deps/colord-gtk.bst
+++ b/elements/core-deps/colord-gtk.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://www.freedesktop.org/software/colord/releases/colord-gtk-0.2.0.tar.xz
 
+  ref: 2a4cfae08bc69f000f40374934cd26f4ae86d286ce7de89f1622abc59644c717
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/colord.bst b/elements/core-deps/colord.bst
index 3da26ffa..50cb88fb 100644
--- a/elements/core-deps/colord.bst
+++ b/elements/core-deps/colord.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: https://www.freedesktop.org/software/colord/releases/colord-1.4.5.tar.xz
+  ref: b774ea443d239f4a2ee1853bd678426e669ddeda413dcb71cea1638c4d6c5e17
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/cups-pk-helper.bst b/elements/core-deps/cups-pk-helper.bst
index 2d854916..7bce6806 100644
--- a/elements/core-deps/cups-pk-helper.bst
+++ b/elements/core-deps/cups-pk-helper.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.freedesktop.org/software/cups-pk-helper/releases/cups-pk-helper-0.2.6.tar.xz
+  ref: 959af8f2f5a2761e7e498b61c9caf25ae963335031eae9972d999e9a0d97a228
 - kind: local
   path: files/cups-pk-helper/cups-pk-helper.service
 
diff --git a/elements/core-deps/dconf.bst b/elements/core-deps/dconf.bst
index ce7ca304..6ca1440c 100644
--- a/elements/core-deps/dconf.bst
+++ b/elements/core-deps/dconf.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/dconf.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:dconf/0.40/dconf-0.40.0.tar.xz
+  ref: cf7f22a4c9200421d8d3325c5c1b8b93a36843650c9f95d6451e20f0bcb24533
 build-depends:
 - sdk/vala.bst
 - freedesktop-sdk.bst:components/dbus.bst
diff --git a/elements/core-deps/dnsmasq.bst b/elements/core-deps/dnsmasq.bst
index 7e70059e..38979ea9 100644
--- a/elements/core-deps/dnsmasq.bst
+++ b/elements/core-deps/dnsmasq.bst
@@ -2,10 +2,12 @@ kind: make
 
 sources:
 - kind: tar
-  url: http://www.thekelleys.org.uk/dnsmasq/dnsmasq-2.84.tar.xz
+  url: http://www.thekelleys.org.uk/dnsmasq/dnsmasq-2.85.tar.xz
 
+  ref: ad98d3803df687e5b938080f3d25c628fe41c878752d03fbc6199787fee312fa
 depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
 
 variables:
-  make-install: make -j1 BINDIR=%{sbindir} PREFIX="%{prefix}" DESTDIR="%{install-root}" install
+  make-install: make -j1 BINDIR=%{sbindir} PREFIX="%{prefix}" DESTDIR="%{install-root}"
+    install
diff --git a/elements/core-deps/dotconf.bst b/elements/core-deps/dotconf.bst
index 7b69cb37..ca0cf67b 100644
--- a/elements/core-deps/dotconf.bst
+++ b/elements/core-deps/dotconf.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:williamh/dotconf/archive/v1.3.tar.gz
+  ref: 7f1ecf40de1ad002a065a321582ed34f8c14242309c3547ad59710ae3c805653
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/ebtables.bst b/elements/core-deps/ebtables.bst
index 56bef9c7..310a535a 100644
--- a/elements/core-deps/ebtables.bst
+++ b/elements/core-deps/ebtables.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://ftp.netfilter.org/pub/ebtables/ebtables-2.0.11.tar.gz
+  ref: b71f654784a726329f88b412ef7b96b4e5d786ed2bd28193ed7b4c0d677dfd2a
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/eos-updater.bst b/elements/core-deps/eos-updater.bst
index fd75f7ca..f006bea2 100644
--- a/elements/core-deps/eos-updater.bst
+++ b/elements/core-deps/eos-updater.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:endlessm/eos-updater/archive/Release_3.9.3.tar.gz
 
+  ref: c24b1c55a378f057a319dbe8408b88bd68198a89bd329ea7194d0c9c7f42dd76
 depends:
 - core-deps/NetworkManager.bst
 - core-deps/flatpak.bst
diff --git a/elements/core-deps/espeak.bst b/elements/core-deps/espeak.bst
index 03f796f9..285fa792 100644
--- a/elements/core-deps/espeak.bst
+++ b/elements/core-deps/espeak.bst
@@ -2,6 +2,7 @@ kind: manual
 sources:
 - kind: zip
   url: sourceforge_net:espeak/files/espeak/espeak-1.48/espeak-1.48.04-source.zip
+  ref: bf9a17673adffcc28ff7ea18764f06136547e97bbd9edf2ec612f09b207f0659
 depends:
 - core-deps/portaudio.bst
 - freedesktop-sdk.bst:bootstrap-import.bst
diff --git a/elements/core-deps/evolution-data-server.bst b/elements/core-deps/evolution-data-server.bst
index e6e1614d..eb8e6f78 100644
--- a/elements/core-deps/evolution-data-server.bst
+++ b/elements/core-deps/evolution-data-server.bst
@@ -1,10 +1,9 @@
 kind: cmake
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/evolution-data-server.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:evolution-data-server/3.40/evolution-data-server-3.40.0.tar.xz
+  ref: ed572f0cb6a2365809943449a8ccbee652681e2d9a1a7f4a54b60cbb53d87445
 build-depends:
 - core-deps/intltool.bst
 - sdk/vala.bst
diff --git a/elements/core-deps/exempi.bst b/elements/core-deps/exempi.bst
index 94097515..be424b1d 100644
--- a/elements/core-deps/exempi.bst
+++ b/elements/core-deps/exempi.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://libopenraw.freedesktop.org/download/exempi-2.4.5.tar.bz2
+  ref: 406185feb88e84ea1d4b4251370be2991205790d7113a7e28e192ff46a4f221e
 build-depends:
 - freedesktop-sdk.bst:components/expat.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/exiv2.bst b/elements/core-deps/exiv2.bst
index 562c714a..d1fa34ce 100644
--- a/elements/core-deps/exiv2.bst
+++ b/elements/core-deps/exiv2.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:Exiv2/exiv2/archive/v0.26.tar.gz
+  ref: 51cffa8d19d67e1da6c1d0f570a75b8f6c814113367318c2c0407691888c5f01
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
 depends:
diff --git a/elements/core-deps/flatpak-builder.bst b/elements/core-deps/flatpak-builder.bst
index e38e8b42..ba7345ff 100644
--- a/elements/core-deps/flatpak-builder.bst
+++ b/elements/core-deps/flatpak-builder.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:flatpak/flatpak-builder/releases/download/1.0.11/flatpak-builder-1.0.11.tar.xz
 
+  ref: 11834b76bbd2b3c4bf182632d231ac9cfd7e0bdf3ccb58fb5b370b7dccccd44c
 build-depends:
 - freedesktop-sdk.bst:components/docbook-xsl.bst
 - freedesktop-sdk.bst:components/libxslt.bst
diff --git a/elements/core-deps/flatpak.bst b/elements/core-deps/flatpak.bst
index dd162694..e275beb7 100644
--- a/elements/core-deps/flatpak.bst
+++ b/elements/core-deps/flatpak.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:flatpak/flatpak/releases/download/1.10.2/flatpak-1.10.2.tar.xz
 
+  ref: db152739d072f8ff299e4e888d8963a1b4538da7b10e0b86525be438f2e1dde4
 build-depends:
 - core-deps/python-pyparsing.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/folks.bst b/elements/core-deps/folks.bst
index dd53d17b..a9517270 100644
--- a/elements/core-deps/folks.bst
+++ b/elements/core-deps/folks.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/folks.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:folks/0.15/folks-0.15.2.tar.xz
+  ref: ef777b2696d15ec31ba8b940ecabc17fe7fab909584f9425258f54d295ccd122
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/core-deps/freerdp.bst b/elements/core-deps/freerdp.bst
index 7d7cac01..0046000d 100644
--- a/elements/core-deps/freerdp.bst
+++ b/elements/core-deps/freerdp.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://pub.freerdp.com/releases/freerdp-2.3.2.tar.gz
 
+  ref: deb888034a441c7f76dc8b3ddea67fac3c0d815739fc2146e1243480ce56c91c
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
 
diff --git a/elements/core-deps/fwupd.bst b/elements/core-deps/fwupd.bst
index 964e15a8..40747586 100644
--- a/elements/core-deps/fwupd.bst
+++ b/elements/core-deps/fwupd.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:fwupd/fwupd/archive/1.4.4.tar.gz
 
+  ref: 91152fa0568fadcd71607e675ba63c6038038e254b404eabbcb1b6d2d1d98fa1
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gegl.bst b/elements/core-deps/gegl.bst
index b147b21a..eb1a8365 100644
--- a/elements/core-deps/gegl.bst
+++ b/elements/core-deps/gegl.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://download.gimp.org/pub/gegl/0.4/gegl-0.4.30.tar.xz
 
+  ref: c112782cf4096969e23217ccdfabe42284e35d5435ff0c43d40e4c70faeca8dd
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/core-deps/geocode-glib.bst b/elements/core-deps/geocode-glib.bst
index f956e83f..d3dd2097 100644
--- a/elements/core-deps/geocode-glib.bst
+++ b/elements/core-deps/geocode-glib.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/geocode-glib.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:geocode-glib/3.26/geocode-glib-3.26.2.tar.xz
+  ref: 01fe84cfa0be50c6e401147a2bc5e2f1574326e2293b55c69879be3e82030fd1
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gexiv2.bst b/elements/core-deps/gexiv2.bst
index 19d91247..b030b58f 100644
--- a/elements/core-deps/gexiv2.bst
+++ b/elements/core-deps/gexiv2.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gexiv2/0.12/gexiv2-0.12.2.tar.xz
+  ref: 2322b552aca330eef79724a699c51a302345d5e074738578b398b7f2ff97944c
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/core-deps/gfbgraph.bst b/elements/core-deps/gfbgraph.bst
index 694b7eee..1c8b5755 100644
--- a/elements/core-deps/gfbgraph.bst
+++ b/elements/core-deps/gfbgraph.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libgfbgraph.git
-  track: stable-0.2.x
+- kind: tar
+  url: gnome_downloads:gfbgraph/0.2/gfbgraph-0.2.4.tar.xz
+  ref: 6065391f35e7335588cc6b0cc4c1abbce7341488573a654551264cb9793b9379
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/glib-testing.bst b/elements/core-deps/glib-testing.bst
index 831efac6..3b3da55f 100644
--- a/elements/core-deps/glib-testing.bst
+++ b/elements/core-deps/glib-testing.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://tecnocode.co.uk/downloads/libglib-testing-0.1.0.tar.xz
 
+  ref: cf1e72007ce656a4e23432ac61082f7b87a9baaed57c4b0b0bf872ce7e2fb6e7
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/glibmm-2.4.bst b/elements/core-deps/glibmm-2.4.bst
index 85a2e7ca..6f593d28 100644
--- a/elements/core-deps/glibmm-2.4.bst
+++ b/elements/core-deps/glibmm-2.4.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/glibmm.git
-  track: glibmm-2-66
+- kind: tar
+  url: gnome_downloads:glibmm/2.66/glibmm-2.66.0.tar.xz
+  ref: 9e1db7d43d2e2d4dfa2771354e21a69a6beec7c446b711619cf8c779e13a581e
 build-depends:
 - core-deps/mm-common.bst
 - freedesktop-sdk.bst:components/m4.bst
diff --git a/elements/core-deps/gmime.bst b/elements/core-deps/gmime.bst
index 2a2702ae..1128637d 100644
--- a/elements/core-deps/gmime.bst
+++ b/elements/core-deps/gmime.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gmime.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gmime/3.2/gmime-3.2.7.tar.xz
+  ref: 2aea96647a468ba2160a64e17c6dc6afe674ed9ac86070624a3f584c10737d44
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gnome-autoar.bst b/elements/core-deps/gnome-autoar.bst
index 4d774bfa..8a139948 100644
--- a/elements/core-deps/gnome-autoar.bst
+++ b/elements/core-deps/gnome-autoar.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-autoar.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-autoar/0.3/gnome-autoar-0.3.1.tar.xz
+  ref: 0e78713e6f0de339fdee16bab82753ae290fe80fa7b4ba6e3db8c1465b81d0f8
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gnome-online-accounts.bst b/elements/core-deps/gnome-online-accounts.bst
index 17650870..fb1c3334 100644
--- a/elements/core-deps/gnome-online-accounts.bst
+++ b/elements/core-deps/gnome-online-accounts.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-online-accounts.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gnome-online-accounts/3.40/gnome-online-accounts-3.40.0.tar.xz
+  ref: 585c4f979f6f543b77bfdb4fb01eb18ba25c2aec5b7866c676d929616fb2c3fa
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gnome-online-miners.bst b/elements/core-deps/gnome-online-miners.bst
index aa6ad891..31f2e931 100644
--- a/elements/core-deps/gnome-online-miners.bst
+++ b/elements/core-deps/gnome-online-miners.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-online-miners.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-online-miners/3.34/gnome-online-miners-3.34.0.tar.xz
+  ref: 845c2260fb12f14315c800d04d60f37e076c7c7b4222587ae75f108562fa52d8
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/gnome-video-effects.bst b/elements/core-deps/gnome-video-effects.bst
index a973f048..80c6b0ee 100644
--- a/elements/core-deps/gnome-video-effects.bst
+++ b/elements/core-deps/gnome-video-effects.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-video-effects.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-video-effects/0.5/gnome-video-effects-0.5.0.tar.xz
+  ref: 4dc68e9b38fdfc1e8e0414e2d7ee83ace78efdee76f30506cc9dcd07394ad0c8
 build-depends:
 - freedesktop-sdk.bst:components/perl-xml-parser.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/gom.bst b/elements/core-deps/gom.bst
index d04659cb..994214b7 100644
--- a/elements/core-deps/gom.bst
+++ b/elements/core-deps/gom.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gom.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gom/0.4/gom-0.4.tar.xz
+  ref: 68d08006aaa3b58169ce7cf1839498f45686fba8115f09acecb89d77e1018a9d
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/core-deps/graphviz.bst b/elements/core-deps/graphviz.bst
index fa9b256b..0bbea7f1 100644
--- a/elements/core-deps/graphviz.bst
+++ b/elements/core-deps/graphviz.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: gitlab_com:graphviz/graphviz/-/archive/2.47.1/graphviz-2.47.1.tar.gz
 
+  ref: b7f4d6819e4dc17c15e7e07bd1ea5e081ef6569b63f8427117dac32f0e3837b4
 build-depends:
 - sdk/gobject-introspection.bst
 - freedesktop-sdk.bst:components/bison.bst
diff --git a/elements/core-deps/grilo-plugins.bst b/elements/core-deps/grilo-plugins.bst
index 88845936..d4a05361 100644
--- a/elements/core-deps/grilo-plugins.bst
+++ b/elements/core-deps/grilo-plugins.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/grilo-plugins.git
-  track: master
+- kind: tar
+  url: gnome_downloads:grilo-plugins/0.3/grilo-plugins-0.3.13.tar.xz
+  ref: 1c4305d67364a930543836cc1982f30e946973b8ff6af3efe31d87709ab520f8
 build-depends:
 - freedesktop-sdk.bst:components/itstool.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/grilo.bst b/elements/core-deps/grilo.bst
index e2c32d1f..bfcbd8ec 100644
--- a/elements/core-deps/grilo.bst
+++ b/elements/core-deps/grilo.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/grilo.git
-  track: master
+- kind: tar
+  url: gnome_downloads:grilo/0.3/grilo-0.3.13.tar.xz
+  ref: d14837f22341943ed8a189d9f0827a17016b802d18d0ed080e1413de0fdc927b
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gsound.bst b/elements/core-deps/gsound.bst
index 958b87e4..5fcf765a 100644
--- a/elements/core-deps/gsound.bst
+++ b/elements/core-deps/gsound.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gsound.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gsound/1.0/gsound-1.0.2.tar.xz
+  ref: bba8ff30eea815037e53bee727bbd5f0b6a2e74d452a7711b819a7c444e78e53
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gspell.bst b/elements/core-deps/gspell.bst
index a78fd63e..bed5ce8b 100644
--- a/elements/core-deps/gspell.bst
+++ b/elements/core-deps/gspell.bst
@@ -1,10 +1,9 @@
 kind: autotools
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gspell.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gspell/1.9/gspell-1.9.1.tar.xz
+  ref: dcbb769dfdde8e3c0a8ed3102ce7e661abbf7ddf85df08b29915e92cd723abdd
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gssdp.bst b/elements/core-deps/gssdp.bst
index 294da34e..1f551947 100644
--- a/elements/core-deps/gssdp.bst
+++ b/elements/core-deps/gssdp.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gssdp.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gssdp/1.2/gssdp-1.2.3.tar.xz
+  ref: a263dcb6730e3b3dc4bbbff80cf3fab4cd364021981d419db6dd5a8e148aa7e8
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gst-editing-services.bst b/elements/core-deps/gst-editing-services.bst
index 05755f06..043373c3 100644
--- a/elements/core-deps/gst-editing-services.bst
+++ b/elements/core-deps/gst-editing-services.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://gstreamer.freedesktop.org/src/gstreamer-editing-services/gstreamer-editing-services-1.16.2.tar.xz
 
+  ref: 0e06a6191a0c6c16e16272bf2573cecaeb245f10629486ad940a299bef700c16
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gtk-vnc.bst b/elements/core-deps/gtk-vnc.bst
index 776a869f..19aceceb 100644
--- a/elements/core-deps/gtk-vnc.bst
+++ b/elements/core-deps/gtk-vnc.bst
@@ -1,14 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gtk-vnc.git
-  track: master
-  submodules:
-    subprojects/keycodemapdb:
-      checkout: true
-      url: gitlab_com:keycodemap/keycodemapdb.git
-
+- kind: tar
+  url: gnome_downloads:gtk-vnc/1.2/gtk-vnc-1.2.0.tar.xz
+  ref: 7aaf80040d47134a963742fb6c94e970fcb6bf52dc975d7ae542b2ef5f34b94a
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/core-deps/gtkmm-3.bst b/elements/core-deps/gtkmm-3.bst
index 28f5ff19..e6b2c094 100644
--- a/elements/core-deps/gtkmm-3.bst
+++ b/elements/core-deps/gtkmm-3.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gtkmm.git
-  track: gtkmm-3-24
+- kind: tar
+  url: gnome_downloads:gtkmm/3.24/gtkmm-3.24.4.tar.xz
+  ref: 9beb71c3e90cfcfb790396b51e3f5e7169966751efd4f3ef9697114be3be6743
 build-depends:
 - core-deps/mm-common.bst
 - freedesktop-sdk.bst:components/m4.bst
diff --git a/elements/core-deps/gupnp-av.bst b/elements/core-deps/gupnp-av.bst
index 86c72c65..e131432a 100644
--- a/elements/core-deps/gupnp-av.bst
+++ b/elements/core-deps/gupnp-av.bst
@@ -1,10 +1,9 @@
 kind: autotools
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gupnp-av.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gupnp-av/0.12/gupnp-av-0.12.11.tar.xz
+  ref: 689dcf1492ab8991daea291365a32548a77d1a2294d85b33622b55cca9ce6fdc
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gupnp-dlna.bst b/elements/core-deps/gupnp-dlna.bst
index c8a13904..d28aa965 100644
--- a/elements/core-deps/gupnp-dlna.bst
+++ b/elements/core-deps/gupnp-dlna.bst
@@ -1,10 +1,9 @@
 kind: autotools
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gupnp-dlna.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gupnp-dlna/0.10/gupnp-dlna-0.10.5.tar.xz
+  ref: 123e368227c11d5c17fc1aa76cbdaffa345355eb51d172cd39fc74a5b468ff6a
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gupnp.bst b/elements/core-deps/gupnp.bst
index cd5136d4..3e2342c3 100644
--- a/elements/core-deps/gupnp.bst
+++ b/elements/core-deps/gupnp.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gupnp.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gupnp/1.2/gupnp-1.2.4.tar.xz
+  ref: f7a0307ea51f5e44d1b832f493dd9045444a3a4e211ef85dfd9aa5dd6eaea7d1
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/intltool.bst b/elements/core-deps/intltool.bst
index d063c0c0..a566e0a8 100644
--- a/elements/core-deps/intltool.bst
+++ b/elements/core-deps/intltool.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://launchpad.net/intltool/trunk/0.51.0/+download/intltool-0.51.0.tar.gz
+  ref: 67c74d94196b153b774ab9f89b2fa6c6ba79352407037c8c14d5aeb334e959cd
 - kind: patch
   path: files/intltool/intltool-perl-5.22-compatibility.patch
 build-depends:
diff --git a/elements/core-deps/jsonrpc-glib.bst b/elements/core-deps/jsonrpc-glib.bst
index 5b955650..25f8146e 100644
--- a/elements/core-deps/jsonrpc-glib.bst
+++ b/elements/core-deps/jsonrpc-glib.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/jsonrpc-glib.git
-  track: master
+- kind: tar
+  url: gnome_downloads:jsonrpc-glib/3.38/jsonrpc-glib-3.38.0.tar.xz
+  ref: dc5f1914a91152b70fa8fc9a11ede13148ab4af644db27a36632388c927a8a82
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/core-deps/libbluray.bst b/elements/core-deps/libbluray.bst
index c7bb5c90..15d131e3 100644
--- a/elements/core-deps/libbluray.bst
+++ b/elements/core-deps/libbluray.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: http://ftp.videolan.org/pub/videolan/libbluray/1.2.1/libbluray-1.2.1.tar.bz2
+  url: http://ftp.videolan.org/pub/videolan/libbluray/1.3.0/libbluray-1.3.0.tar.bz2
+  ref: e2dbaf99e84e0a9725f4985bcb85d41e52c2261cc651d8884b1b790b5ef016f9
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/libcacard.bst b/elements/core-deps/libcacard.bst
index 50a40449..ef4c10f1 100644
--- a/elements/core-deps/libcacard.bst
+++ b/elements/core-deps/libcacard.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: 
https://gitlab.freedesktop.org/spice/libcacard/uploads/56cb2499198e78e560a1d4c716cd8ab1/libcacard-2.7.0.tar.xz
+  ref: 16b1a0847d5f9d2290e0785eca40f2e49d1ed80814bfc758c05c76b3c89cdb6f
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/libcanberra.bst b/elements/core-deps/libcanberra.bst
index 30fc4f10..17b108e7 100644
--- a/elements/core-deps/libcanberra.bst
+++ b/elements/core-deps/libcanberra.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: tarballs_needing_help:libcanberra-0.30.tar.xz
+  ref: c2b671e67e0c288a69fc33dc1b6f1b534d07882c2aceed37004bf48c601afa72
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/libcap-ng.bst b/elements/core-deps/libcap-ng.bst
index 65f30a5a..feb75a42 100644
--- a/elements/core-deps/libcap-ng.bst
+++ b/elements/core-deps/libcap-ng.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://people.redhat.com/sgrubb/libcap-ng/libcap-ng-0.8.2.tar.gz
 
+  ref: 52c083b77c2b0d8449dee141f9c3eba76e6d4c5ad44ef05df25891126cb85ae9
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/core-deps/libcdio-paranoia.bst b/elements/core-deps/libcdio-paranoia.bst
index 04d1ae14..8a5ef774 100644
--- a/elements/core-deps/libcdio-paranoia.bst
+++ b/elements/core-deps/libcdio-paranoia.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: ftp_gnu_org:libcdio/libcdio-paranoia-10.2+0.94+2.tar.gz
 
+  ref: d60f82ece97eeb92407a9ee03f3499c8983206672c28ae5e4e22179063c81941
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/core-deps/libcdio.bst b/elements/core-deps/libcdio.bst
index 7b4570c8..cec2f40c 100644
--- a/elements/core-deps/libcdio.bst
+++ b/elements/core-deps/libcdio.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:libcdio/libcdio-2.1.0.tar.bz2
+  ref: 8550e9589dbd594bfac93b81ecf129b1dc9d0d51e90f9696f1b2f9b2af32712b
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/libchamplain.bst b/elements/core-deps/libchamplain.bst
index d88b5e91..3743710f 100644
--- a/elements/core-deps/libchamplain.bst
+++ b/elements/core-deps/libchamplain.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libchamplain.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:libchamplain/0.12/libchamplain-0.12.20.tar.xz
+  ref: 0232b4bfcd130a1c5bda7b6aec266bf2d06e701e8093df1886f1e26bc1ba3066
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/libcue.bst b/elements/core-deps/libcue.bst
index cf5bdb0b..adb4a7a9 100644
--- a/elements/core-deps/libcue.bst
+++ b/elements/core-deps/libcue.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: https://github.com/lipnitsk/libcue/archive/v2.2.1.tar.gz
+  ref: f27bc3ebb2e892cd9d32a7bee6d84576a60f955f29f748b9b487b173712f1200
 build-depends:
 - freedesktop-sdk.bst:components/bison.bst
 - freedesktop-sdk.bst:components/flex.bst
diff --git a/elements/core-deps/libdazzle.bst b/elements/core-deps/libdazzle.bst
index 4c5e5844..3cd8bd1f 100644
--- a/elements/core-deps/libdazzle.bst
+++ b/elements/core-deps/libdazzle.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libdazzle.git
-  track: master
+- kind: tar
+  url: gnome_downloads:libdazzle/3.40/libdazzle-3.40.0.tar.xz
+  ref: dba99a7e65fa6662c012b306e5d0f99ff3b466a46059ea7aa0104aaf65ce4ba5
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/core-deps/libdvdread.bst b/elements/core-deps/libdvdread.bst
index dee71785..70b007be 100644
--- a/elements/core-deps/libdvdread.bst
+++ b/elements/core-deps/libdvdread.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: http://download.videolan.org/pub/videolan/libdvdread/6.1.1/libdvdread-6.1.1.tar.bz2
+  url: http://download.videolan.org/pub/videolan/libdvdread/6.1.2/libdvdread-6.1.2.tar.bz2
+  ref: cc190f553758ced7571859e301f802cb4821f164d02bfacfd320c14a4e0da763
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/libgdata.bst b/elements/core-deps/libgdata.bst
index 907caa48..d05e3ea7 100644
--- a/elements/core-deps/libgdata.bst
+++ b/elements/core-deps/libgdata.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libgdata.git
-  track: master
+- kind: tar
+  url: gnome_downloads:libgdata/0.18/libgdata-0.18.1.tar.xz
+  ref: dd8592eeb6512ad0a8cf5c8be8c72e76f74bfe6b23e4dd93f0756ee0716804c7
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/libgit2-glib.bst b/elements/core-deps/libgit2-glib.bst
index 2a4a3612..e8a5f420 100644
--- a/elements/core-deps/libgit2-glib.bst
+++ b/elements/core-deps/libgit2-glib.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libgit2-glib.git
-  track: master
+- kind: tar
+  url: gnome_downloads:libgit2-glib/0.99/libgit2-glib-0.99.0.1.tar.xz
+  ref: e05a75c444d9c8d5991afc4a5a64cd97d731ce21aeb7c1c651ade1a3b465b9de
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/core-deps/libgit2.bst b/elements/core-deps/libgit2.bst
index d39ba141..165aed70 100644
--- a/elements/core-deps/libgit2.bst
+++ b/elements/core-deps/libgit2.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:libgit2/libgit2/archive/v0.26.3.tar.gz
+  ref: 0da4e211dfb63c22e5f43f2a4a5373e86a140afa88a25ca6ba3cc2cae58263d2
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
 depends:
diff --git a/elements/core-deps/libgnomekbd.bst b/elements/core-deps/libgnomekbd.bst
index 7814b067..00c992d0 100644
--- a/elements/core-deps/libgnomekbd.bst
+++ b/elements/core-deps/libgnomekbd.bst
@@ -1,10 +1,9 @@
 kind: autotools
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libgnomekbd.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:libgnomekbd/3.26/libgnomekbd-3.26.1.tar.xz
+  ref: f7ca02631576e9b88aee1b1bae37ac1488b80ee7975f20a97f29e761a7172679
 build-depends:
 - sdk/gobject-introspection.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/libgphoto2.bst b/elements/core-deps/libgphoto2.bst
index fad2f369..735cbe95 100644
--- a/elements/core-deps/libgphoto2.bst
+++ b/elements/core-deps/libgphoto2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: downloads.sourceforge.net:gphoto/libgphoto/2.5.16/libgphoto2-2.5.16.tar.bz2
+  ref: e757416d1623e01a9d0d294b2e790162e434c0964f50d3b7ff1a3424b62a2906
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/libgsf.bst b/elements/core-deps/libgsf.bst
index 6711c337..06fc39c6 100644
--- a/elements/core-deps/libgsf.bst
+++ b/elements/core-deps/libgsf.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libgsf.git
-  track: master
+- kind: tar
+  url: gnome_downloads:libgsf/1.14/libgsf-1.14.47.tar.xz
+  ref: d188ebd3787b5375a8fd38ee6f761a2007de5e98fa0cf5623f271daa67ba774d
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/libgtop.bst b/elements/core-deps/libgtop.bst
index 87b966f2..865eaa8a 100644
--- a/elements/core-deps/libgtop.bst
+++ b/elements/core-deps/libgtop.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libgtop.git
-  track: master
+- kind: tar
+  url: gnome_downloads:libgtop/2.40/libgtop-2.40.0.tar.xz
+  ref: 78f3274c0c79c434c03655c1b35edf7b95ec0421430897fb1345a98a265ed2d4
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:components/texinfo.bst
diff --git a/elements/core-deps/libgusb.bst b/elements/core-deps/libgusb.bst
index baf6c7ad..919e854d 100644
--- a/elements/core-deps/libgusb.bst
+++ b/elements/core-deps/libgusb.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: people_freedesktop_org:~hughsient/releases/libgusb-0.3.6.tar.xz
+  ref: 13277948a2ee06861234938089aea21bce6ad862f14c81a2efa85340ed701efd
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/libgweather.bst b/elements/core-deps/libgweather.bst
index e0079b36..0b4c07a5 100644
--- a/elements/core-deps/libgweather.bst
+++ b/elements/core-deps/libgweather.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:libgweather/40/libgweather-40.0.tar.xz
+  ref: ca4e8f2a4baaa9fc6d75d8856adb57056ef1cd6e55c775ba878ae141b6276ee6
 build-depends:
 - sdk/vala.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/libgxps.bst b/elements/core-deps/libgxps.bst
index cfc1a727..fea78944 100644
--- a/elements/core-deps/libgxps.bst
+++ b/elements/core-deps/libgxps.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libgxps.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:libgxps/0.3/libgxps-0.3.2.tar.xz
+  ref: 6d27867256a35ccf9b69253eb2a88a32baca3b97d5f4ef7f82e3667fa435251c
 build-depends:
 - sdk/gobject-introspection.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/libimobiledevice.bst b/elements/core-deps/libimobiledevice.bst
index b0f3440b..293a7b43 100644
--- a/elements/core-deps/libimobiledevice.bst
+++ b/elements/core-deps/libimobiledevice.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://github.com/libimobiledevice/libimobiledevice/releases/download/1.3.0/libimobiledevice-1.3.0.tar.bz2
 
+  ref: 53f2640c6365cd9f302a6248f531822dc94a6cced3f17128d4479a77bd75b0f6
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/core-deps/libinput.bst b/elements/core-deps/libinput.bst
index 1601f0e4..460cab14 100644
--- a/elements/core-deps/libinput.bst
+++ b/elements/core-deps/libinput.bst
@@ -22,3 +22,4 @@ variables:
 sources:
 - kind: tar
   url: https://www.freedesktop.org/software/libinput/libinput-1.17.1.tar.xz
+  ref: e51c50f3ce253961bed452d9f93102cc26128406975ab88ff9ec9e6c3b875137
diff --git a/elements/core-deps/libjcat.bst b/elements/core-deps/libjcat.bst
index 094cd055..5dc36fd3 100644
--- a/elements/core-deps/libjcat.bst
+++ b/elements/core-deps/libjcat.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:hughsie/libjcat/archive/0.1.3.tar.gz
 
+  ref: 70336f56ab0b39274d59ae945528a0ba9c0cd120d664892097f6edc1de098fa6
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/libmbim.bst b/elements/core-deps/libmbim.bst
index 2ab4eb98..3b05bec2 100644
--- a/elements/core-deps/libmbim.bst
+++ b/elements/core-deps/libmbim.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.freedesktop.org/software/libmbim/libmbim-1.24.6.tar.xz
+  ref: 760465caaa1ccd699c14290e9791da456d5300dd11ebf4c1486151033e875dfd
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/libmediaart.bst b/elements/core-deps/libmediaart.bst
index f60d8057..2ba4033c 100644
--- a/elements/core-deps/libmediaart.bst
+++ b/elements/core-deps/libmediaart.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libmediaart.git
-  track: master
+- kind: tar
+  url: gnome_downloads:libmediaart/1.9/libmediaart-1.9.4.tar.xz
+  ref: a57be017257e4815389afe4f58fdacb6a50e74fd185452b23a652ee56b04813d
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/libmtp.bst b/elements/core-deps/libmtp.bst
index 20bd32e8..c13ae5e7 100644
--- a/elements/core-deps/libmtp.bst
+++ b/elements/core-deps/libmtp.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: downloads.sourceforge.net:libmtp/libmtp/1.1.17/libmtp-1.1.17.tar.gz
+  ref: f8a34cf52d9f9b9cb8c7f26b12da347d4af7eb904c13189602e4c6b62d1a79dc
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/libmusicbrainz.bst b/elements/core-deps/libmusicbrainz.bst
index 2630da84..7dd02397 100644
--- a/elements/core-deps/libmusicbrainz.bst
+++ b/elements/core-deps/libmusicbrainz.bst
@@ -3,6 +3,7 @@ sources:
 - kind: tar
   url: github_com:metabrainz/libmusicbrainz/releases/download/release-5.1.0/libmusicbrainz-5.1.0.tar.gz
 # this patch has been merged upstream and can be removed when this is updated
+  ref: 6749259e89bbb273f3f5ad7acdffb7c47a2cf8fcaeab4c4695484cef5f4c6b46
 - kind: patch
   path: files/libmusicbrainz/cmake-ninja.patch
 build-depends:
diff --git a/elements/core-deps/libnfs.bst b/elements/core-deps/libnfs.bst
index 0f6de097..4dbf5573 100644
--- a/elements/core-deps/libnfs.bst
+++ b/elements/core-deps/libnfs.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://sites.google.com/site/libnfstarballs/li/libnfs-2.0.0.tar.gz
+  ref: 6eaeb85559bb3e378284688f06fc56b018d324a5fc69f3f5259d24593ad113cf
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/libnma.bst b/elements/core-deps/libnma.bst
index 2ade7a9b..d2e6970b 100644
--- a/elements/core-deps/libnma.bst
+++ b/elements/core-deps/libnma.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libnma.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:libnma/1.8/libnma-1.8.30.tar.xz
+  ref: da33e72a49e07d855d97a52aa9a8962a4c96f52b9168c4e0027117ad8ffdafb4
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/liboauth.bst b/elements/core-deps/liboauth.bst
index 8541c701..b633ecec 100644
--- a/elements/core-deps/liboauth.bst
+++ b/elements/core-deps/liboauth.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: downloads.sourceforge.net:liboauth/liboauth-1.0.3.tar.gz
+  ref: 0df60157b052f0e774ade8a8bac59d6e8d4b464058cc55f9208d72e41156811f
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/libosinfo.bst b/elements/core-deps/libosinfo.bst
index 8ca1a127..d042d4df 100644
--- a/elements/core-deps/libosinfo.bst
+++ b/elements/core-deps/libosinfo.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: https://releases.pagure.org/libosinfo/libosinfo-1.9.0.tar.xz
+  ref: b4f3418154ef3f43d9420827294916aea1827021afc06e1644fc56951830a359
 - kind: local
   path: files/libosinfo/pci.ids
 - kind: local
diff --git a/elements/core-deps/libostree.bst b/elements/core-deps/libostree.bst
index dbcf8563..586bfa2b 100644
--- a/elements/core-deps/libostree.bst
+++ b/elements/core-deps/libostree.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:ostreedev/ostree/releases/download/v2020.8/libostree-2020.8.tar.xz
+  ref: fdaa5992d0a6f62157152355449ac8476c50df6602be398e9ad10438cc1e679b
 - kind: patch
   path: files/ostree/no-boot-symlink.patch
 
diff --git a/elements/core-deps/libpeas.bst b/elements/core-deps/libpeas.bst
index def4671d..69c88b5c 100644
--- a/elements/core-deps/libpeas.bst
+++ b/elements/core-deps/libpeas.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libpeas.git
-  track: master
+- kind: tar
+  url: gnome_downloads:libpeas/1.30/libpeas-1.30.0.tar.xz
+  ref: 0bf5562e9bfc0382a9dcb81f64340787542568762a3a367d9d90f6185898b9a3
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/libqmi.bst b/elements/core-deps/libqmi.bst
index 597bc8e3..6b5abacb 100644
--- a/elements/core-deps/libqmi.bst
+++ b/elements/core-deps/libqmi.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.freedesktop.org/software/libqmi/libqmi-1.28.2.tar.xz
+  ref: 8c8c3ee719874d2529bce9b35b028fe435b36f003979a360d3ad0938449db783
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/libsigcplusplus-2.0.bst b/elements/core-deps/libsigcplusplus-2.0.bst
index 620d64bb..b5b11e18 100644
--- a/elements/core-deps/libsigcplusplus-2.0.bst
+++ b/elements/core-deps/libsigcplusplus-2.0.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: github_com:libsigcplusplus/libsigcplusplus.git
-  track: libsigc++-2-10
+- kind: tar
+  url: gnome_downloads:libsigc++/2.10/libsigc++-2.10.6.tar.xz
+  ref: dda176dc4681bda9d5a2ac1bc55273bdd381662b7a6d49e918267d13e8774e1b
 build-depends:
 - core-deps/mm-common.bst
 - freedesktop-sdk.bst:components/m4.bst
diff --git a/elements/core-deps/libssh2.bst b/elements/core-deps/libssh2.bst
index 7f5c44b9..ba8bb980 100644
--- a/elements/core-deps/libssh2.bst
+++ b/elements/core-deps/libssh2.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:libssh2/libssh2/archive/libssh2-1.8.0.tar.gz
+  ref: 973f63f98141d68b4a1bc85791ee29411eeab12a6230ae1aca9c368550ccafae
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
 depends:
diff --git a/elements/core-deps/libusbmuxd.bst b/elements/core-deps/libusbmuxd.bst
index a197d4d2..ba88c1ec 100644
--- a/elements/core-deps/libusbmuxd.bst
+++ b/elements/core-deps/libusbmuxd.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://github.com/libimobiledevice/libusbmuxd/releases/download/2.0.2/libusbmuxd-2.0.2.tar.bz2
 
+  ref: cc6a808553da4efa9fa5638be256d5ae020498795d9d260d280b87074e799b20
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/core-deps/libvirt-glib.bst b/elements/core-deps/libvirt-glib.bst
index d0be8789..1795a8e9 100644
--- a/elements/core-deps/libvirt-glib.bst
+++ b/elements/core-deps/libvirt-glib.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: https://libvirt.org/sources/glib/libvirt-glib-4.0.0.tar.xz
+  ref: 8423f7069daa476307321d1c11e2ecc285340cd32ca9fc05207762843edeacbd
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/libvirt.bst b/elements/core-deps/libvirt.bst
index a2731e9f..4e7d69e5 100644
--- a/elements/core-deps/libvirt.bst
+++ b/elements/core-deps/libvirt.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: https://libvirt.org/sources/libvirt-7.2.0.tar.xz
+  ref: 01f459d0c7ba5009622a628dba1a026200e8f4a299fea783b936a71d7e0ed1d0
 - kind: local
   path: files/libvirt/80-libvirt.preset
 
diff --git a/elements/core-deps/libxklavier.bst b/elements/core-deps/libxklavier.bst
index e1000118..ae815baa 100644
--- a/elements/core-deps/libxklavier.bst
+++ b/elements/core-deps/libxklavier.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: people_freedesktop_org:~svu/libxklavier-5.4.tar.bz2
 
+  ref: 17a34194df5cbcd3b7bfd0f561d95d1f723aa1c87fca56bc2c209514460a9320
 build-depends:
 - sdk/gobject-introspection.bst
 - freedesktop-sdk.bst:components/iso-codes.bst
diff --git a/elements/core-deps/lmdb.bst b/elements/core-deps/lmdb.bst
index 667a524c..7cbec183 100644
--- a/elements/core-deps/lmdb.bst
+++ b/elements/core-deps/lmdb.bst
@@ -16,3 +16,4 @@ config:
 sources:
 - kind: tar
   url: github_com:LMDB/lmdb/archive/LMDB_0.9.28.tar.gz
+  ref: 47457d3d3ae2c489b52078a07e9f55ec6e094b48c2204029c7754e2972fe1882
diff --git a/elements/core-deps/malcontent.bst b/elements/core-deps/malcontent.bst
index d52be45d..ca93b6a1 100644
--- a/elements/core-deps/malcontent.bst
+++ b/elements/core-deps/malcontent.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://tecnocode.co.uk/downloads/malcontent-0.9.0.tar.xz
 
+  ref: e973044c07237dfb4ec78afcde2a88136b13d4c5f87f556e36e4682067a852c7
 build-depends:
 - core-deps/glib-testing.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/mm-common.bst b/elements/core-deps/mm-common.bst
index 9d65886f..6d8e9710 100644
--- a/elements/core-deps/mm-common.bst
+++ b/elements/core-deps/mm-common.bst
@@ -17,9 +17,9 @@
 
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/mm-common.git
-  track: master
+- kind: tar
+  url: gnome_downloads:mm-common/1.0/mm-common-1.0.2.tar.xz
+  ref: a2a99f3fa943cf662f189163ed39a2cfc19a428d906dd4f92b387d3659d1641d
 - kind: local
   path: files/mm-common/libstdc++.tag
   directory: doctags/
diff --git a/elements/core-deps/mobile-broadband-provider-info.bst 
b/elements/core-deps/mobile-broadband-provider-info.bst
index 7ef48952..033f96ef 100644
--- a/elements/core-deps/mobile-broadband-provider-info.bst
+++ b/elements/core-deps/mobile-broadband-provider-info.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/mobile-broadband-provider-info.git
-  track: master
+- kind: tar
+  url: gnome_downloads:mobile-broadband-provider-info/20201225/mobile-broadband-provider-info-20201225.tar.xz
+  ref: 0d7fc04df41772f94eb813bb9a1dcfd42fa6f44df60005d5535a54d949143dbd
 build-depends:
 - freedesktop-sdk.bst:components/libxslt.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/mogwai.bst b/elements/core-deps/mogwai.bst
index de1ba4a4..66fcd726 100644
--- a/elements/core-deps/mogwai.bst
+++ b/elements/core-deps/mogwai.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:endlessm/mogwai/archive/Release_3.7.5.tar.gz
 
+  ref: c270cf1a9594a05cf84fc7150aa5a91e0da24b0724486ed4828e4b56504a8972
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 
diff --git a/elements/core-deps/mpc.bst b/elements/core-deps/mpc.bst
index 73b52fc7..9a818abb 100644
--- a/elements/core-deps/mpc.bst
+++ b/elements/core-deps/mpc.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:mpc/mpc-1.2.1.tar.gz
+  ref: 17503d2c395dfcf106b622dc142683c1199431d095367c6aacba6eec30340459
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/neon.bst b/elements/core-deps/neon.bst
index a97767fb..5daebfc6 100644
--- a/elements/core-deps/neon.bst
+++ b/elements/core-deps/neon.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://http.debian.net/debian/pool/main/n/neon27/neon27_0.30.2.orig.tar.gz
+  ref: db0bd8cdec329b48f53a6f00199c92d5ba40b0f015b153718d1b15d3d967fbca
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/openldap.bst b/elements/core-deps/openldap.bst
index da6674e5..858255c8 100644
--- a/elements/core-deps/openldap.bst
+++ b/elements/core-deps/openldap.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: tarballs_needing_help:openldap-2.4.45.tgz
+  ref: cdd6cffdebcd95161a73305ec13fc7a78e9707b46ca9f84fb897cd5626df3824
 build-depends:
 - freedesktop-sdk.bst:components/groff.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/osinfo-db-tools.bst b/elements/core-deps/osinfo-db-tools.bst
index bc5746ed..e8fe37c7 100644
--- a/elements/core-deps/osinfo-db-tools.bst
+++ b/elements/core-deps/osinfo-db-tools.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: https://releases.pagure.org/libosinfo/osinfo-db-tools-1.9.0.tar.xz
+  ref: 255f1c878bacec70c3020ff5a9cb0f6bd861ca0009f24608df5ef6f62d5243c0
 build-depends:
 - freedesktop-sdk.bst:components/libxslt.bst
 - freedesktop-sdk.bst:components/perl-xml-parser.bst
diff --git a/elements/core-deps/osinfo-db.bst b/elements/core-deps/osinfo-db.bst
index 0be0f743..9b039d07 100644
--- a/elements/core-deps/osinfo-db.bst
+++ b/elements/core-deps/osinfo-db.bst
@@ -2,8 +2,9 @@ kind: manual
 
 sources:
 - kind: remote
-  url: https://releases.pagure.org/libosinfo/osinfo-db-20210312.tar.xz
+  url: https://releases.pagure.org/libosinfo/osinfo-db-20210426.tar.xz
 
+  ref: 66c93b4a5b319b2ff7d40360d9e94486a9a45f2c0dd1c30d4b31de4f223070d0
 build-depends:
 - core-deps/osinfo-db-tools.bst
 
diff --git a/elements/core-deps/pangomm-1.4.bst b/elements/core-deps/pangomm-1.4.bst
index 66c837cb..2a9c0545 100644
--- a/elements/core-deps/pangomm-1.4.bst
+++ b/elements/core-deps/pangomm-1.4.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/pangomm.git
-  track: pangomm-2-46
+- kind: tar
+  url: gnome_downloads:pangomm/2.46/pangomm-2.46.0.tar.xz
+  ref: d3787d04d6198b606f3efa357b3b452a7140e2a7dee56f9f9ce516d7d5fcec1b
 build-depends:
 - core-deps/mm-common.bst
 - freedesktop-sdk.bst:components/m4.bst
diff --git a/elements/core-deps/parted.bst b/elements/core-deps/parted.bst
index b497cd86..e76e47bc 100644
--- a/elements/core-deps/parted.bst
+++ b/elements/core-deps/parted.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:parted/parted-3.4.tar.xz
+  ref: e1298022472da5589b7f2be1d5ee3c1b66ec3d96dfbad03dc642afd009da5342
 - kind: patch
   path: files/parted/include-sysmacros.patch
 build-depends:
diff --git a/elements/core-deps/perl-parse-yapp.bst b/elements/core-deps/perl-parse-yapp.bst
index 6db1ac3d..68e9f20c 100644
--- a/elements/core-deps/perl-parse-yapp.bst
+++ b/elements/core-deps/perl-parse-yapp.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://cpan.metacpan.org/authors/id/W/WB/WBRASWELL/Parse-Yapp-1.21.tar.gz
 
+  ref: 3810e998308fba2e0f4f26043035032b027ce51ce5c8a52a8b8e340ca65f13e5
 depends:
 - freedesktop-sdk.bst:components/perl.bst
 - freedesktop-sdk.bst:bootstrap-import.bst
diff --git a/elements/core-deps/phodav.bst b/elements/core-deps/phodav.bst
index 454b83cc..7fb31c21 100644
--- a/elements/core-deps/phodav.bst
+++ b/elements/core-deps/phodav.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/phodav.git
-  track: master
+- kind: tar
+  url: gnome_downloads:phodav/2.5/phodav-2.5.tar.xz
+  ref: 71f0a9cd70afd4dd1412a0298331dbb8ac71c0377f52117afc15eb88dc6fb910
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:components/perl-xml-parser.bst
diff --git a/elements/core-deps/plist.bst b/elements/core-deps/plist.bst
index 33bcdc1b..e5a5d445 100644
--- a/elements/core-deps/plist.bst
+++ b/elements/core-deps/plist.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://github.com/libimobiledevice/libplist/releases/download/2.2.0/libplist-2.2.0.tar.bz2
 
+  ref: 4a5517e5377ec421df84c586ba85bb4e1d26f11ad203d7d450a907c0156fbd9a
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/core-deps/plymouth.bst b/elements/core-deps/plymouth.bst
index 8cf772f2..24a6b2f2 100644
--- a/elements/core-deps/plymouth.bst
+++ b/elements/core-deps/plymouth.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.freedesktop.org/software/plymouth/releases/plymouth-0.9.5.tar.xz
+  ref: ecae257f351d098340542a5bc06de029404c24dcee87e6ebb2abd5ef117fce86
 - kind: patch
   path: files/plymouth/plymouth-stdin.patch
 
diff --git a/elements/core-deps/portablexdr.bst b/elements/core-deps/portablexdr.bst
index 57091f86..9900bcd2 100644
--- a/elements/core-deps/portablexdr.bst
+++ b/elements/core-deps/portablexdr.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: tarballs_needing_help:portablexdr-4.9.1.tar.gz
+  ref: 5cf4bdd153cf4d44eaf10b725f451d0cfadc070b4b9a9ccfb64094b8f78de72c
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/portaudio.bst b/elements/core-deps/portaudio.bst
index a9fcb3bc..61861919 100644
--- a/elements/core-deps/portaudio.bst
+++ b/elements/core-deps/portaudio.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: gnome_download:teams/releng/tarballs-needing-help/portaudio/pa_stable_v190600_20161030.tgz
 
+  ref: f5a21d7dcd6ee84397446fa1fa1a0675bb2e8a4a6dceb4305a8404698d8d1513
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
 
diff --git a/elements/core-deps/power-profiles-daemon.bst b/elements/core-deps/power-profiles-daemon.bst
index 6fbdb0bb..33411ef1 100644
--- a/elements/core-deps/power-profiles-daemon.bst
+++ b/elements/core-deps/power-profiles-daemon.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
git_freedesktop_org:hadess/power-profiles-daemon/uploads/5efc7a766d5a50ed811e085035c7b967/power-profiles-daemon-0.1.tar.xz
 
+  ref: a8122fc2420591a58f23f74c72251d3092fecb860a740620aa5393002c985fe9
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 
diff --git a/elements/core-deps/ppp.bst b/elements/core-deps/ppp.bst
index 75c3a55f..4bb3f071 100644
--- a/elements/core-deps/ppp.bst
+++ b/elements/core-deps/ppp.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_download:teams/releng/tarballs-needing-help/ppp/ppp-2.4.7.tar.gz
+  ref: 02e0a3dd3e4799e33103f70ec7df75348c8540966ee7c948e4ed8a42bbccfb30
 - kind: patch
   path: files/ppp/use-openssl.patch
 build-depends:
@@ -11,4 +12,5 @@ depends:
 variables:
   # not a real autotools project
   autogen: ''
-  make-install: make -j1 INSTROOT="%{install-root}" BINDIR="%{install-root}%{bindir}" install
+  make-install: make -j1 INSTROOT="%{install-root}" BINDIR="%{install-root}%{bindir}"
+    install
diff --git a/elements/core-deps/pyatspi.bst b/elements/core-deps/pyatspi.bst
index e5218a6c..37dd4956 100644
--- a/elements/core-deps/pyatspi.bst
+++ b/elements/core-deps/pyatspi.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/pyatspi2.git
-  track: master
+- kind: tar
+  url: gnome_downloads:pyatspi/2.38/pyatspi-2.38.1.tar.xz
+  ref: e49f27e9e29c24ac3ccb837a7f221952532940da0344e7e8c0899924aeb98151
 build-depends:
 - freedesktop-sdk.bst:components/python3.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/pycups.bst b/elements/core-deps/pycups.bst
index ac225c6b..a1d11d76 100644
--- a/elements/core-deps/pycups.bst
+++ b/elements/core-deps/pycups.bst
@@ -3,6 +3,7 @@ sources:
 - kind: tar
   url: http://cyberelk.net/tim/data/pycups/pycups-1.9.73.tar.bz2
 
+  ref: c381be011889ca6f728598578c89c8ac9f7ab1e95b614474df9f2fa831ae5335
 depends:
 - freedesktop-sdk.bst:components/cups.bst
 - freedesktop-sdk.bst:components/python3.bst
diff --git a/elements/core-deps/python-pyparsing.bst b/elements/core-deps/python-pyparsing.bst
index 25c7412c..59ac0dd8 100644
--- a/elements/core-deps/python-pyparsing.bst
+++ b/elements/core-deps/python-pyparsing.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/a2/56/0404c03c83cfcca229071d3c921d7d79ed385060bbe969fde3fd8f774ebd/pyparsing-2.4.6.tar.gz
 
+  ref: 4c830582a84fb022400b85429791bc551f1f4871c33f23e44f353119e92f969f
 build-depends:
 - freedesktop-sdk.bst:components/python3-setuptools.bst
 
diff --git a/elements/core-deps/qemu.bst b/elements/core-deps/qemu.bst
index 213a331f..2ff68645 100644
--- a/elements/core-deps/qemu.bst
+++ b/elements/core-deps/qemu.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://download.qemu.org/qemu-5.2.0.tar.xz
+  ref: cb18d889b628fbe637672b0326789d9b0e3b8027e0445b936537c78549df17bc
 - kind: patch
   path: files/qemu/Fix-build-after-glib-e38982df.patch
 
diff --git a/elements/core-deps/rpcsvc-proto.bst b/elements/core-deps/rpcsvc-proto.bst
index 8216fd85..16e52904 100644
--- a/elements/core-deps/rpcsvc-proto.bst
+++ b/elements/core-deps/rpcsvc-proto.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:thkukuk/rpcsvc-proto/archive/v1.3.1.tar.gz
+  ref: 95219e83e11aba0abb4149d3e997e5fc8060912dde10af4d9f41fc1d79c7a919
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/samba.bst b/elements/core-deps/samba.bst
index 74763542..6e65b357 100644
--- a/elements/core-deps/samba.bst
+++ b/elements/core-deps/samba.bst
@@ -1,7 +1,8 @@
 kind: manual
 sources:
 - kind: tar
-  url: https://download.samba.org/pub/samba/stable/samba-4.14.2.tar.gz
+  url: https://download.samba.org/pub/samba/stable/samba-4.14.3.tar.gz
+  ref: efc24ccf277055891f830719bd155b6a6dd9341d71961ee79e0ef75dc1aeb598
 - kind: patch
   path: files/samba/fix-root-build.patch
 build-depends:
@@ -34,7 +35,7 @@ config:
   - mv %{install-root}/var/run %{install-root}
 environment:
   MAKEFLAGS: -j%{max-jobs}
-  V: 1
+  V: '1'
 environment-nocache:
 - MAKEFLAGS
 - V
diff --git a/elements/core-deps/sane-backends.bst b/elements/core-deps/sane-backends.bst
index bc555ad2..29fccbb8 100644
--- a/elements/core-deps/sane-backends.bst
+++ b/elements/core-deps/sane-backends.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://gitlab.com/sane-project/backends/uploads/a3ba9fff29253a94e84074917bff581a/sane-backends-1.0.27.tar.gz
 
+  ref: 293747bf37275c424ebb2c833f8588601a60b2f9653945d5a3194875355e36c9
 build-depends:
 - freedesktop-sdk.bst:components/systemd.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
@@ -15,4 +16,5 @@ depends:
 config:
   install-commands:
     (>):
-    - install -Dm 644 tools/udev/libsane.rules %{install-root}$(pkg-config --variable=udevdir 
udev)/rules.d/60-libsane.rules
+    - install -Dm 644 tools/udev/libsane.rules %{install-root}$(pkg-config --variable=udevdir
+      udev)/rules.d/60-libsane.rules
diff --git a/elements/core-deps/slirp-helper.bst b/elements/core-deps/slirp-helper.bst
index c53cd182..54628056 100644
--- a/elements/core-deps/slirp-helper.bst
+++ b/elements/core-deps/slirp-helper.bst
@@ -16,8 +16,268 @@ environment:
 sources:
 - kind: tar
   url: https://static.crates.io/crates/libslirp/libslirp-4.3.0.crate
+  ref: 4c6f95366c6c3299af0cfe7852888ca4b0aed40eeb22ca2ff644bec799439455
 - kind: cargo
 
+  ref:
+  - name: ansi_term
+    version: 0.11.0
+    sha: ee49baf6cb617b853aa8d93bf420db2383fab46d314482ca2803b40d5fde979b
+  - name: atty
+    version: 0.2.14
+    sha: d9b39be18770d11421cdb1b9947a45dd3f37e93092cbf377614828a319d5fee8
+  - name: bitflags
+    version: 1.2.1
+    sha: cf1de2fe8c75bc145a2f577add951f8134889b4795d47466a54a5c846d691693
+  - name: block-buffer
+    version: 0.7.3
+    sha: c0940dc441f31689269e10ac70eb1002a3a1d3ad1390e030043662eb7fe4688b
+  - name: block-padding
+    version: 0.1.5
+    sha: fa79dedbb091f449f1f39e53edf88d5dbe95f895dae6135a8d7b881fb5af73f5
+  - name: byte-tools
+    version: 0.3.1
+    sha: e3b5ca7a04898ad4bcd41c90c5285445ff5b791899bb1b0abdd2a2aa791211d7
+  - name: byteorder
+    version: 1.3.4
+    sha: 08c48aae112d48ed9f069b33538ea9e3e90aa263cfa3d1c24309612b1f7472de
+  - name: cc
+    version: 1.0.61
+    sha: ed67cbde08356238e75fc4656be4749481eeffb09e19f320a25237d5221c985d
+  - name: cfg-if
+    version: 0.1.10
+    sha: 4785bdd1c96b2a846b2bd7cc02e86b6b3dbf14e7e53446c4f54c92a361040822
+  - name: clap
+    version: 2.33.3
+    sha: 37e58ac78573c40708d45522f0d80fa2f01cc4f9b4e2bf749807255454312002
+  - name: crypto-mac
+    version: 0.7.0
+    sha: 4434400df11d95d556bac068ddfedd482915eb18fe8bea89bc80b6e4b1c179e5
+  - name: derivative
+    version: 2.1.1
+    sha: cb582b60359da160a9477ee80f15c8d784c477e69c217ef2cdd4169c24ea380f
+  - name: digest
+    version: 0.8.1
+    sha: f3d0c8c8752312f9713efd397ff63acb9f85585afbf179282e720e7704954dd5
+  - name: enumflags2
+    version: 0.6.4
+    sha: 83c8d82922337cd23a15f88b70d8e4ef5f11da38dd7cdb55e84dd5de99695da0
+  - name: enumflags2_derive
+    version: 0.6.4
+    sha: 946ee94e3dbf58fdd324f9ce245c7b238d46a66f00e86a020b71996349e46cce
+  - name: error-chain
+    version: 0.12.4
+    sha: 2d2f06b9cac1506ece98fe3231e3cc9c4410ec3d5b1f24ae1c8946f0742cdefc
+  - name: etherparse
+    version: 0.8.3
+    sha: 706c7cc3e05a64c496e9cca52ef8ad82a846a8c5b03345fddd81a76009a435b7
+  - name: fake-simd
+    version: 0.1.2
+    sha: e88a8acf291dafb59c2d96e8f59828f3838bb1a70398823ade51a84de6a6deed
+  - name: fastrand
+    version: 1.4.0
+    sha: ca5faf057445ce5c9d4329e382b2ce7ca38550ef3b73a5348362d5f24e0c7fe3
+  - name: fuchsia-zircon
+    version: 0.3.3
+    sha: 2e9763c69ebaae630ba35f74888db465e49e259ba1bc0eda7d06f4a067615d82
+  - name: fuchsia-zircon-sys
+    version: 0.3.3
+    sha: 3dcaa9ae7725d12cdb85b3ad99a434db70b468c09ded17e012d86b5c1010f7a7
+  - name: generic-array
+    version: 0.12.3
+    sha: c68f0274ae0e023facc3c97b2e00f076be70e254bc851d972503b328db79b2ec
+  - name: heck
+    version: 0.3.1
+    sha: 20564e78d53d2bb135c343b3f47714a56af2061f1c928fdb541dc7b9fdd94205
+  - name: hermit-abi
+    version: 0.1.17
+    sha: 5aca5565f760fb5b220e499d72710ed156fdb74e631659e99377d9ebfbd13ae8
+  - name: hmac
+    version: 0.7.1
+    sha: 5dcb5e64cda4c23119ab41ba960d1e170a774c8e4b9d9e6a9bc18aabf5e59695
+  - name: idna
+    version: 0.2.0
+    sha: 02e2673c30ee86b5b96a9cb52ad15718aa1f966f5ab9ad54a8b95d5ca33120a9
+  - name: instant
+    version: 0.1.7
+    sha: 63312a18f7ea8760cdd0a7c5aac1a619752a246b833545e3e36d1f81f7cd9e66
+  - name: iovec
+    version: 0.1.4
+    sha: b2b3ea6ff95e175473f8ffe6a7eb7c00d054240321b84c57051175fe3c1e075e
+  - name: ipnetwork
+    version: 0.17.0
+    sha: 02c3eaab3ac0ede60ffa41add21970a7df7d91772c03383aac6c2c3d53cc716b
+  - name: kernel32-sys
+    version: 0.2.2
+    sha: 7507624b29483431c0ba2d82aece8ca6cdba9382bff4ddd0f7490560c056098d
+  - name: lazy_static
+    version: 1.4.0
+    sha: e2abad23fbc42b3700f2f279844dc832adb2b2eb069b2df918f455c4e18cc646
+  - name: lazycell
+    version: 1.3.0
+    sha: 830d08ce1d1d941e6b30645f1a0eb5643013d835ce3779a5fc208261dbe10f55
+  - name: libc
+    version: 0.2.79
+    sha: 2448f6066e80e3bfc792e9c98bf705b4b0fc6e8ef5b43e5889aff0eaa9c58743
+  - name: libslirp-sys
+    version: 4.2.0
+    sha: 26e54a5719a79bee3b25ee15e4b2cf80f51597b2d45d9889f3c1b8c150d907b4
+  - name: libsystemd
+    version: 0.2.1
+    sha: f3a64961e79726a5b05e0db592097ca895831d755484203578fe75b580847262
+  - name: log
+    version: 0.4.11
+    sha: 4fabed175da42fed1fa0746b0ea71f412aa9d35e76e95e59b192c64b9dc2bf8b
+  - name: matches
+    version: 0.1.8
+    sha: 7ffc5c5338469d4d3ea17d269fa8ea3512ad247247c30bd2df69e68309ed0a08
+  - name: mio
+    version: 0.6.22
+    sha: fce347092656428bc8eaf6201042cb551b8d67855af7374542a92a0fbfcac430
+  - name: mio-extras
+    version: 2.0.6
+    sha: 52403fe290012ce777c4626790c8951324a2b9e3316b3143779c72b029742f19
+  - name: miow
+    version: 0.2.1
+    sha: 8c1f2f3b1cf331de6896aabf6e9d55dca90356cc9960cca7eaaf408a355ae919
+  - name: net2
+    version: 0.2.35
+    sha: 3ebc3ec692ed7c9a255596c67808dee269f64655d8baf7b4f0638e51ba1d6853
+  - name: nix
+    version: 0.17.0
+    sha: 50e4785f2c3b7589a0d0c1dd60285e1188adac4006e8abd6dd578e1567027363
+  - name: once_cell
+    version: 1.4.1
+    sha: 260e51e7efe62b592207e9e13a68e43692a7a279171d6ba57abd208bf23645ad
+  - name: opaque-debug
+    version: 0.2.3
+    sha: 2839e79665f131bdb5782e51f2c6c9599c133c6098982a54c794358bf432529c
+  - name: percent-encoding
+    version: 2.1.0
+    sha: d4fd5641d01c8f18a23da7b6fe29298ff4b55afcccdf78973b24cf3175fee32e
+  - name: pkg-config
+    version: 0.3.19
+    sha: 3831453b3449ceb48b6d9c7ad7c96d5ea673e9b470a1dc578c2ce6521230884c
+  - name: proc-macro-crate
+    version: 0.1.5
+    sha: 1d6ea3c4595b96363c13943497db34af4460fb474a95c43f4446ad341b8c9785
+  - name: proc-macro-error
+    version: 1.0.4
+    sha: da25490ff9892aab3fcf7c36f08cfb902dd3e71ca0f9f9517bea02a73a5ce38c
+  - name: proc-macro-error-attr
+    version: 1.0.4
+    sha: a1be40180e52ecc98ad80b184934baf3d0d29f979574e439af5a55274b35f869
+  - name: proc-macro2
+    version: 1.0.24
+    sha: 1e0704ee1a7e00d7bb417d0770ea303c1bccbabf0ef1667dae92b5967f5f8a71
+  - name: quote
+    version: 1.0.7
+    sha: aa563d17ecb180e500da1cfd2b028310ac758de548efdd203e18f283af693f37
+  - name: scoped-tls
+    version: 1.0.0
+    sha: ea6a9290e3c9cf0f18145ef7ffa62d68ee0bf5fcd651017e586dc7fd5da448c2
+  - name: serde
+    version: 1.0.117
+    sha: b88fa983de7720629c9387e9f517353ed404164b1e482c970a90c1a4aaf7dc1a
+  - name: serde_derive
+    version: 1.0.117
+    sha: cbd1ae72adb44aab48f325a02444a5fc079349a8d804c1fc922aed3f7454c74e
+  - name: serde_repr
+    version: 0.1.6
+    sha: 2dc6b7951b17b051f3210b063f12cc17320e2fe30ae05b0fe2a3abb068551c76
+  - name: sha2
+    version: 0.8.2
+    sha: a256f46ea78a0c0d9ff00077504903ac881a1dafdc20da66545699e7776b3e69
+  - name: slab
+    version: 0.4.2
+    sha: c111b5bd5695e56cffe5129854aa230b39c93a305372fdbb2668ca2394eea9f8
+  - name: strsim
+    version: 0.8.0
+    sha: 8ea5119cdb4c55b55d432abb513a0429384878c15dde60cc77b1c99de1a95a6a
+  - name: structopt
+    version: 0.3.20
+    sha: 126d630294ec449fae0b16f964e35bf3c74f940da9dca17ee9b905f7b3112eb8
+  - name: structopt-derive
+    version: 0.4.13
+    sha: 65e51c492f9e23a220534971ff5afc14037289de430e3c83f9daf6a1b6ae91e8
+  - name: subtle
+    version: 1.0.0
+    sha: 2d67a5a62ba6e01cb2192ff309324cb4875d0c451d55fe2319433abe7a05a8ee
+  - name: syn
+    version: 1.0.45
+    sha: ea9c5432ff16d6152371f808fb5a871cd67368171b09bb21b43df8e4a47a3556
+  - name: textwrap
+    version: 0.11.0
+    sha: d326610f408c7a4eb6f51c37c330e496b08506c9457c9d34287ecc38809fb060
+  - name: tinyvec
+    version: 0.3.4
+    sha: 238ce071d267c5710f9d31451efec16c5ee22de34df17cc05e56cbc92e967117
+  - name: toml
+    version: 0.5.7
+    sha: 75cf45bb0bef80604d001caaec0d09da99611b3c0fd39d3080468875cdb65645
+  - name: typenum
+    version: 1.12.0
+    sha: 373c8a200f9e67a0c95e62a4f52fbf80c23b4381c05a17845531982fa99e6b33
+  - name: unicode-bidi
+    version: 0.3.4
+    sha: 49f2bd0c6468a8230e1db229cff8029217cf623c767ea5d60bfbd42729ea54d5
+  - name: unicode-normalization
+    version: 0.1.13
+    sha: 6fb19cf769fa8c6a80a162df694621ebeb4dafb606470b2b2fce0be40a98a977
+  - name: unicode-segmentation
+    version: 1.6.0
+    sha: e83e153d1053cbb5a118eeff7fd5be06ed99153f00dbcd8ae310c5fb2b22edc0
+  - name: unicode-width
+    version: 0.1.8
+    sha: 9337591893a19b88d8d87f2cec1e73fad5cdfd10e5a6f349f498ad6ea2ffb1e3
+  - name: unicode-xid
+    version: 0.2.1
+    sha: f7fe0bb3479651439c9112f72b6c505038574c9fbb575ed1bf3b797fa39dd564
+  - name: url
+    version: 2.1.1
+    sha: 829d4a8476c35c9bf0bbce5a3b23f4106f79728039b726d292bb93bc106787cb
+  - name: uuid
+    version: 0.8.1
+    sha: 9fde2f6a4bea1d6e007c4ad38c6839fa71cbb63b6dbf5b595aa38dc9b1093c11
+  - name: vec_map
+    version: 0.8.2
+    sha: f1bddf1187be692e79c5ffeab891132dfb0f236ed36a43c7ed39f1165ee20191
+  - name: version_check
+    version: 0.9.2
+    sha: b5a972e5669d67ba988ce3dc826706fb0a8b01471c088cb0b6110b805cc36aed
+  - name: void
+    version: 1.0.2
+    sha: 6a02e4885ed3bc0f2de90ea6dd45ebcbb66dacffe03547fadbb0eeae2770887d
+  - name: winapi
+    version: 0.2.8
+    sha: 167dc9d6949a9b857f3451275e911c3f44255842c1f7a76f33c55103a909087a
+  - name: winapi
+    version: 0.3.9
+    sha: 5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419
+  - name: winapi-build
+    version: 0.1.1
+    sha: 2d315eee3b34aca4797b2da6b13ed88266e6d612562a0c46390af8299fc699bc
+  - name: winapi-i686-pc-windows-gnu
+    version: 0.4.0
+    sha: ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6
+  - name: winapi-x86_64-pc-windows-gnu
+    version: 0.4.0
+    sha: 712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f
+  - name: ws2_32-sys
+    version: 0.2.1
+    sha: d59cefebd0c892fa2dd6de581e937301d8552cb44489cdff035c6187cb63fa5e
+  - name: zbus
+    version: 1.2.1
+    sha: 3a8a1a98eac87778308d7b2725cee6543a13936a3913b98e37fcf8ce9e4362da
+  - name: zbus_macros
+    version: 1.2.1
+    sha: 9ca4d050be67f3b7a29878a6f0788a8dcd100c7297e619dcb91051f94679a8a4
+  - name: zvariant
+    version: 2.2.0
+    sha: fb79b31a454101beda19e64082dfd9ad59c5ff8afa41e1de1065333105b02740
+  - name: zvariant_derive
+    version: 2.2.0
+    sha: 605bf414a59d93a3d55055e72ea066c5c0bc578ed2227df15c407207b1c780ef
 config:
   install-commands:
   - cargo install --all-features --path . --root "%{install-root}%{prefix}"
diff --git a/elements/core-deps/speech-dispatcher.bst b/elements/core-deps/speech-dispatcher.bst
index 4cbc0a96..c1b34165 100644
--- a/elements/core-deps/speech-dispatcher.bst
+++ b/elements/core-deps/speech-dispatcher.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:brailcom/speechd/releases/download/0.9.0/speech-dispatcher-0.9.0.tar.gz
+  ref: 73b924f42fcc2155a452693320956f7075b71750023ea21e8bb79822c0caa2f9
 - kind: patch
   path: files/speech-dispatcher/Fix-build-after-glib-e38982df.patch
 build-depends:
diff --git a/elements/core-deps/spice-gtk.bst b/elements/core-deps/spice-gtk.bst
index a1861936..7439d0cd 100644
--- a/elements/core-deps/spice-gtk.bst
+++ b/elements/core-deps/spice-gtk.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: spice:gtk/spice-gtk-0.39.tar.xz
 
+  ref: 23acbee197eaaec9bce6e6bfd885bd8f79708332639243ff04833020865713cd
 build-depends:
 - core-deps/python-pyparsing.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/spice-protocol.bst b/elements/core-deps/spice-protocol.bst
index 15908314..4ce7814c 100644
--- a/elements/core-deps/spice-protocol.bst
+++ b/elements/core-deps/spice-protocol.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: spice:releases/spice-protocol-0.14.3.tar.xz
+  ref: f986e5bc2a1598532c4897f889afb0df9257ac21c160c083703ae7c8de99487a
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/core-deps/spice.bst b/elements/core-deps/spice.bst
index 3b314ee1..83afd70f 100644
--- a/elements/core-deps/spice.bst
+++ b/elements/core-deps/spice.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: spice:releases/spice-server/spice-0.14.3.tar.bz2
+  ref: 551d4be4a07667cf0543f3c895beb6da8a93ef5a9829f2ae47817be5e616a114
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 - core-deps/spice-protocol.bst
diff --git a/elements/core-deps/startup-notification.bst b/elements/core-deps/startup-notification.bst
index 1f3c396c..ebdbf3b1 100644
--- a/elements/core-deps/startup-notification.bst
+++ b/elements/core-deps/startup-notification.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:startup-notification/0.12/startup-notification-0.12.tar.xz
+  ref: 4bd1363a2f3b3eb2c4f7fc33b4977bb9c12b4741206f05109b0ff2b3b30b6bc0
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/system-config-printer.bst b/elements/core-deps/system-config-printer.bst
index edc667ca..196d9904 100644
--- a/elements/core-deps/system-config-printer.bst
+++ b/elements/core-deps/system-config-printer.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://github.com/OpenPrinting/system-config-printer/releases/download/1.5.12/system-config-printer-1.5.12.tar.xz
 
+  ref: 6b16717dfe1f64ada6ef9398dcab07b8b7c864f006588d03002e41b743cf1e14
 build-depends:
 - core-deps/intltool.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
@@ -27,7 +28,7 @@ config:
     - cd %{install-root}%{bindir} && rm system-config-printer system-config-printer-applet
     - cd %{install-root}%{sysconfdir} && rm -r xdg
     - cd %{install-root}%{datadir} && rm -r applications locale man
-    - cd %{install-root}%{datadir}/system-config-printer &&
-      rm -r icons/ troubleshoot/ ui/ xml/ &&
-      rm applet.py check-device-ids.py HIG.py install-printerdriver.py SearchCriterion.py
-      serversettings.py system-config-printer.py timedops.py ToolbarSearchEntry.py userdefault.py
+    - cd %{install-root}%{datadir}/system-config-printer && rm -r icons/ troubleshoot/
+      ui/ xml/ && rm applet.py check-device-ids.py HIG.py install-printerdriver.py
+      SearchCriterion.py serversettings.py system-config-printer.py timedops.py ToolbarSearchEntry.py
+      userdefault.py
diff --git a/elements/core-deps/template-glib.bst b/elements/core-deps/template-glib.bst
index 6952a95d..97603121 100644
--- a/elements/core-deps/template-glib.bst
+++ b/elements/core-deps/template-glib.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/template-glib.git
-  track: master
+- kind: tar
+  url: gnome_downloads:template-glib/3.34/template-glib-3.34.0.tar.xz
+  ref: 216bef6ac3607666b8ca72b936467f7020ce6421c02755c301d079576c9c3dfd
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/core-deps/totem-pl-parser.bst b/elements/core-deps/totem-pl-parser.bst
index 54666499..16883aea 100644
--- a/elements/core-deps/totem-pl-parser.bst
+++ b/elements/core-deps/totem-pl-parser.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/totem-pl-parser.git
-  track: master
+- kind: tar
+  url: gnome_downloads:totem-pl-parser/3.26/totem-pl-parser-3.26.5.tar.xz
+  ref: 5370de46f2e848221779275479b96ac39115b1efd2b0293d4afa87e22c8c528c
 build-depends:
 - sdk/gobject-introspection.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/tracker-2.bst b/elements/core-deps/tracker-2.bst
index 6fe4ec3d..f2b1e3b4 100644
--- a/elements/core-deps/tracker-2.bst
+++ b/elements/core-deps/tracker-2.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/tracker.git
-  track: tracker-2.3
+- kind: tar
+  url: gnome_downloads:tracker/2.3/tracker-2.3.6.tar.xz
+  ref: bd1eb4122135296fa7b57b1c3fa0ed602cf7d06c0b8e534d0bd17ff5f97feef2
 build-depends:
 - sdk/gtk-doc.bst
 - sdk/vala.bst
diff --git a/elements/core-deps/tracker-miners-2.bst b/elements/core-deps/tracker-miners-2.bst
index 04922e71..3eeac38e 100644
--- a/elements/core-deps/tracker-miners-2.bst
+++ b/elements/core-deps/tracker-miners-2.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/tracker-miners.git
-  track: tracker-miners-2.3
+- kind: tar
+  url: gnome_downloads:tracker-miners/2.3/tracker-miners-2.3.5.tar.xz
+  ref: 9509d37fb29acd233058f4df5bd1234b692ac6f946bc2e5f7b8dbf51dfe5b9fa
 build-depends:
 - core-deps/intltool.bst
 - freedesktop-sdk.bst:components/systemd.bst
diff --git a/elements/core-deps/tracker-miners.bst b/elements/core-deps/tracker-miners.bst
index 68bae8d6..57302cb3 100644
--- a/elements/core-deps/tracker-miners.bst
+++ b/elements/core-deps/tracker-miners.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/tracker-miners.git
-  track: master
+- kind: tar
+  url: gnome_downloads:tracker-miners/3.1/tracker-miners-3.1.1.tar.xz
+  ref: e4d361351b156f2862a524415fbebf0539c781cd87c6629662f0265b4803b8b8
 build-depends:
 - freedesktop-sdk.bst:components/asciidoc.bst
 - freedesktop-sdk.bst:components/docbook-xsl.bst
diff --git a/elements/core-deps/udisks2.bst b/elements/core-deps/udisks2.bst
index a9907b1d..64715543 100644
--- a/elements/core-deps/udisks2.bst
+++ b/elements/core-deps/udisks2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:storaged-project/udisks/releases/download/udisks-2.8.2/udisks-2.8.2.tar.bz2
+  ref: 3d233bc8ddac1b84338280e912ca31b613aadd1efca68a9717f818bb3b038bb6
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:components/docbook-xsl.bst
diff --git a/elements/core-deps/uhttpmock.bst b/elements/core-deps/uhttpmock.bst
index 3ff01aa2..79ff7b94 100644
--- a/elements/core-deps/uhttpmock.bst
+++ b/elements/core-deps/uhttpmock.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://tecnocode.co.uk/downloads/uhttpmock/uhttpmock-0.5.3.tar.xz
+  ref: 90843223c3a30bdb7f1eb3442373a03fee425af85a9df289cd687698ccff112f
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/upower.bst b/elements/core-deps/upower.bst
index e14c91d7..c75da70a 100644
--- a/elements/core-deps/upower.bst
+++ b/elements/core-deps/upower.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: 
https://gitlab.freedesktop.org/upower/upower/uploads/93cfe7c8d66ed486001c4f3f55399b7a/upower-0.99.11.tar.xz
+  ref: 64b5ffbfccd5bdb15d925777979a4dbee1a957f9eaeb158dc76175267eddbdef
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/usbredir.bst b/elements/core-deps/usbredir.bst
index abf88c26..fabbf01c 100644
--- a/elements/core-deps/usbredir.bst
+++ b/elements/core-deps/usbredir.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: spice:usbredir/usbredir-0.8.0.tar.bz2
+  url: spice:usbredir/usbredir-0.9.0.tar.xz
+  ref: a3e167bf42bc7fe02c3c9db27d7767f1b8ce41b99ad14a4b0d0a60abe8bf56a6
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 - core-deps/spice-protocol.bst
diff --git a/elements/core-deps/vte.bst b/elements/core-deps/vte.bst
index 888dbd69..9c9ec154 100644
--- a/elements/core-deps/vte.bst
+++ b/elements/core-deps/vte.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/vte.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:vte/0.64/vte-0.64.0.tar.xz
+  ref: c0c60b8dc343167437c86d984b0cf134df86034180ed70513f683006ada3ec41
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/xdg-desktop-portal-gtk.bst b/elements/core-deps/xdg-desktop-portal-gtk.bst
index 9dd26f26..531fd898 100644
--- a/elements/core-deps/xdg-desktop-portal-gtk.bst
+++ b/elements/core-deps/xdg-desktop-portal-gtk.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:flatpak/xdg-desktop-portal-gtk/releases/download/1.8.0/xdg-desktop-portal-gtk-1.8.0.tar.xz
 
+  ref: a52529ed321e044ca9adca5e9718d9ba57c414a2634dd4109df344c5b9eed77f
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/core-deps/xdg-sound-theme.bst b/elements/core-deps/xdg-sound-theme.bst
index f162f55e..e22f0701 100644
--- a/elements/core-deps/xdg-sound-theme.bst
+++ b/elements/core-deps/xdg-sound-theme.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: people_freedesktop_org:~mccann/dist/sound-theme-freedesktop-0.8.tar.bz2
 
+  ref: cb518b20eef05ec2e82dda1fa89a292c1760dc023aba91b8aa69bafac85e8a14
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/xmlb.bst b/elements/core-deps/xmlb.bst
index a1635440..5406051a 100644
--- a/elements/core-deps/xmlb.bst
+++ b/elements/core-deps/xmlb.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://github.com/hughsie/libxmlb/archive/0.1.15.tar.gz
 
+  ref: fa29b6bbf7b91107da6f157e8f7903d176b0cf04bcb0ba1ab64cb38b19d09a19
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core/baobab.bst b/elements/core/baobab.bst
index 6778273a..0966ce53 100644
--- a/elements/core/baobab.bst
+++ b/elements/core/baobab.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/baobab.git
-  track: master
+- kind: tar
+  url: gnome_downloads:baobab/40/baobab-40.0.tar.xz
+  ref: a6aeaa2c327a997fe0d5f443ce95b785e2ba6e338fb0a026cb7dc7d7d688d1a7
 build-depends:
 - sdk/appstream-glib.bst
 - sdk/vala.bst
diff --git a/elements/core/cheese.bst b/elements/core/cheese.bst
index 7baef4c1..51f69fab 100644
--- a/elements/core/cheese.bst
+++ b/elements/core/cheese.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/cheese.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:cheese/3.38/cheese-3.38.0.tar.xz
+  ref: 88d2732b421b903110a2628db25c0d61e219c42bdfb5971151033fba95a8d16f
 build-depends:
 - sdk/appstream-glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core/dconf-editor.bst b/elements/core/dconf-editor.bst
index 43b281b3..029c9289 100644
--- a/elements/core/dconf-editor.bst
+++ b/elements/core/dconf-editor.bst
@@ -1,9 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/dconf-editor.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:dconf-editor/3.38/dconf-editor-3.38.3.tar.xz
+  ref: 571af4c7dad4f049b53e6cd728b79addf08c27ddab6bc57b396d211866ee79e3
 build-depends:
 - sdk/appstream-glib.bst
 - sdk/vala.bst
diff --git a/elements/core/devhelp.bst b/elements/core/devhelp.bst
index 8e61a9cb..e307925b 100644
--- a/elements/core/devhelp.bst
+++ b/elements/core/devhelp.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/devhelp.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:devhelp/40/devhelp-40.0.tar.xz
+  ref: 4db6d853de5f4ef2eb749ede6e32c726c5fba13cd75558fa604c1a562e26267f
 build-depends:
 - sdk/appstream-glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core/eog.bst b/elements/core/eog.bst
index b813cdac..bec02225 100644
--- a/elements/core/eog.bst
+++ b/elements/core/eog.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/eog.git
-  track: master
+- kind: tar
+  url: gnome_downloads:eog/40/eog-40.0.tar.xz
+  ref: 3017c984f115977c22bc4f9d27d09f80ec96adf6901b4ec0f4f542ef023de5f9
 build-depends:
 - freedesktop-sdk.bst:components/itstool.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/epiphany.bst b/elements/core/epiphany.bst
index 9c761c0f..fc9f65b3 100644
--- a/elements/core/epiphany.bst
+++ b/elements/core/epiphany.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/epiphany.git
-  track: master
+- kind: tar
+  url: gnome_downloads:epiphany/40/epiphany-40.0.tar.xz
+  ref: d5f81c0f66ad1bb0137686b337541116e71a1336579b8bc0aaeafdd9aaaba844
 build-depends:
 - sdk/appstream-glib.bst
 - freedesktop-sdk.bst:components/itstool.bst
diff --git a/elements/core/evince.bst b/elements/core/evince.bst
index 45dba643..3623de9d 100644
--- a/elements/core/evince.bst
+++ b/elements/core/evince.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/evince.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:evince/40/evince-40.1.tar.xz
+  ref: 7a666363c350af2e3bbba7f14b3c1befc5012f9ed3d9d073447f4c59f33dcf2d
 build-depends:
 - sdk/appstream-glib.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core/gdm.bst b/elements/core/gdm.bst
index e3341320..bb1a6ad4 100644
--- a/elements/core/gdm.bst
+++ b/elements/core/gdm.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gdm.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gdm/40/gdm-40.0.tar.xz
+  ref: 5ed74b739d3a232ffb1e4a132bcf965bdfe955d995b528773588775b02f2950e
 - kind: local
   path: files/gdm
   directory: gdm-config
diff --git a/elements/core/gedit.bst b/elements/core/gedit.bst
index fb7936ba..109a0d8c 100644
--- a/elements/core/gedit.bst
+++ b/elements/core/gedit.bst
@@ -1,14 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gedit.git
-  track: master
-  submodules:
-    subprojects/libgd:
-      checkout: true
-      url: gitlab_gnome_org:GNOME/libgd.git
-
+- kind: tar
+  url: gnome_downloads:gedit/40/gedit-40.1.tar.xz
+  ref: 55e394a82cb65678b1ab49526cf5bd43f00d8fba21476a4849051a8e137d3691
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/core/gnome-backgrounds.bst b/elements/core/gnome-backgrounds.bst
index be52cf82..d5338ebe 100644
--- a/elements/core/gnome-backgrounds.bst
+++ b/elements/core/gnome-backgrounds.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-backgrounds.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-backgrounds/40/gnome-backgrounds-40.0.tar.xz
+  ref: 46c3133a5ed7180347ae396962bf8827085f0f3b7cd9385452d623c4a167a2f6
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/core/gnome-bluetooth.bst b/elements/core/gnome-bluetooth.bst
index 473dae18..63076815 100644
--- a/elements/core/gnome-bluetooth.bst
+++ b/elements/core/gnome-bluetooth.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-bluetooth.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gnome-bluetooth/3.34/gnome-bluetooth-3.34.5.tar.xz
+  ref: 6c949e52c8becc2054daacd604901f66ce5cf709a5fa91c4bb7cacc939b53ea9
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core/gnome-boxes.bst b/elements/core/gnome-boxes.bst
index 37ca2dcd..53ff26b9 100644
--- a/elements/core/gnome-boxes.bst
+++ b/elements/core/gnome-boxes.bst
@@ -1,16 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-boxes.git
-  track: master
-  submodules:
-    subprojects/gtk-frdp:
-      checkout: true
-      url: gitlab_gnome_org:GNOME/gtk-frdp.git
-    subprojects/libovf-glib:
-      checkout: true
-      url: gitlab_gnome_org:felipeborges/libovf-glib.git
+- kind: tar
+  url: gnome_downloads:gnome-boxes/40/gnome-boxes-40.0.tar.xz
+  ref: fa7f1a5f4d741c962a6aa69cdc6d81d57a2dd29496cb9510629ce166af61acf5
 - kind: patch
   path: files/gnome-boxes/re-order-recommended.patch
 
diff --git a/elements/core/gnome-builder.bst b/elements/core/gnome-builder.bst
index fae273e1..926bdfc1 100644
--- a/elements/core/gnome-builder.bst
+++ b/elements/core/gnome-builder.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-builder.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-builder/3.40/gnome-builder-3.40.0.tar.xz
+  ref: 8814c42e622b73bc688efeb20c9751bf3488fc6751ea3ca9316a53e5289be279
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 runtime-depends:
diff --git a/elements/core/gnome-calculator.bst b/elements/core/gnome-calculator.bst
index 4acc3c8a..35d704fe 100644
--- a/elements/core/gnome-calculator.bst
+++ b/elements/core/gnome-calculator.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-calculator.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-calculator/40/gnome-calculator-40.0.tar.xz
+  ref: f3a25988be1170eb9072d8bb3dc46192136fcb0be80182e17bb34618326c4de3
 build-depends:
 - sdk/appstream-glib.bst
 - sdk/vala.bst
diff --git a/elements/core/gnome-calendar.bst b/elements/core/gnome-calendar.bst
index 94ce356f..b401d0da 100644
--- a/elements/core/gnome-calendar.bst
+++ b/elements/core/gnome-calendar.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-calendar.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gnome-calendar/40/gnome-calendar-40.0.tar.xz
+  ref: 6838c3c2c0c729ab3869aa8619ee9afc896923cbae13f9246bbc36999e85e434
 build-depends:
 - sdk/appstream-glib.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-characters.bst b/elements/core/gnome-characters.bst
index c019c2b8..0a448bcd 100644
--- a/elements/core/gnome-characters.bst
+++ b/elements/core/gnome-characters.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-characters.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-characters/40/gnome-characters-40.0.tar.xz
+  ref: 0a62f5fd56592d0f3eb7be4b132db796c998d7be08ed67e4bf7f059138515d7c
 build-depends:
 - sdk/appstream-glib.bst
 - freedesktop-sdk.bst:components/itstool.bst
diff --git a/elements/core/gnome-clocks.bst b/elements/core/gnome-clocks.bst
index e47563cb..aed34aca 100644
--- a/elements/core/gnome-clocks.bst
+++ b/elements/core/gnome-clocks.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-clocks.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-clocks/40/gnome-clocks-40.0.tar.xz
+  ref: c2ea33b1ce6431bb2faf97e0fbc45f7397f784f054e946da4b0d596dc893a309
 build-depends:
 - sdk/vala.bst
 - freedesktop-sdk.bst:components/itstool.bst
diff --git a/elements/core/gnome-color-manager.bst b/elements/core/gnome-color-manager.bst
index 319a1e60..227e4583 100644
--- a/elements/core/gnome-color-manager.bst
+++ b/elements/core/gnome-color-manager.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-color-manager.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-color-manager/3.36/gnome-color-manager-3.36.0.tar.xz
+  ref: 9ddb9e6b6472e119801381f90905332ec1d4258981721bba831ca246ceb3ad3b
 build-depends:
 - sdk/appstream-glib.bst
 - freedesktop-sdk.bst:components/itstool.bst
diff --git a/elements/core/gnome-contacts.bst b/elements/core/gnome-contacts.bst
index df27aac1..8636da66 100644
--- a/elements/core/gnome-contacts.bst
+++ b/elements/core/gnome-contacts.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-contacts.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-contacts/40/gnome-contacts-40.0.tar.xz
+  ref: c9de6f3f28d84653eda81c63a40f0f5c931ad52c324ff5f9fe4d15c3612f4f70
 build-depends:
 - sdk/vala.bst
 - freedesktop-sdk.bst:components/docbook-xsl.bst
diff --git a/elements/core/gnome-control-center.bst b/elements/core/gnome-control-center.bst
index a9d042f8..5fc87f4c 100644
--- a/elements/core/gnome-control-center.bst
+++ b/elements/core/gnome-control-center.bst
@@ -1,14 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-control-center.git
-  track: master
-  submodules:
-    subprojects/gvc:
-      checkout: true
-      url: gitlab_gnome_org:GNOME/libgnome-volume-control.git
-
+- kind: tar
+  url: gnome_downloads:gnome-control-center/40/gnome-control-center-40.0.tar.xz
+  ref: ccc9a5736517385109ae5a59906c258244dd879b7503ad5984cf41655cb302f1
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-desktop.bst b/elements/core/gnome-desktop.bst
index 55629ef1..292b5aa4 100644
--- a/elements/core/gnome-desktop.bst
+++ b/elements/core/gnome-desktop.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-desktop.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gnome-desktop/40/gnome-desktop-40.0.tar.xz
+  ref: 20abfd3f831e4e8092b55839311661dc73b2bf13fc9bef71c4a5a4475da9ee04
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core/gnome-disk-utility.bst b/elements/core/gnome-disk-utility.bst
index c1490065..af1b9c94 100644
--- a/elements/core/gnome-disk-utility.bst
+++ b/elements/core/gnome-disk-utility.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-disk-utility.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-disk-utility/40/gnome-disk-utility-40.0.tar.xz
+  ref: 9f9c72f4453c9f6cb0ff9d9deeec67703e11b0736d826f7d025cf6a686ef4897
 build-depends:
 - sdk/appstream-glib.bst
 - freedesktop-sdk.bst:components/docbook-xsl.bst
diff --git a/elements/core/gnome-font-viewer.bst b/elements/core/gnome-font-viewer.bst
index bf1d29eb..175f2278 100644
--- a/elements/core/gnome-font-viewer.bst
+++ b/elements/core/gnome-font-viewer.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-font-viewer.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-font-viewer/40/gnome-font-viewer-40.0.tar.xz
+  ref: d2cc7686946690dc274a5d0c72841d358d0ccd42d3f34993c698bdf13588fe42
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/core/gnome-initial-setup.bst b/elements/core/gnome-initial-setup.bst
index bcd97752..c7ccd1c7 100644
--- a/elements/core/gnome-initial-setup.bst
+++ b/elements/core/gnome-initial-setup.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-initial-setup.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-initial-setup/40/gnome-initial-setup-40.0.tar.xz
+  ref: 14e0c74614380ee112a7414fec6606bd0f6f3f421b980070ca7d519d1b99896f
 - kind: local
   path: files/gnome-initial-setup
   directory: gnome-initial-setup-config
@@ -40,4 +40,5 @@ config:
   install-commands:
     (>):
     - mkdir -p %{install-root}%{sysusersdir}
-    - install -m 644 gnome-initial-setup-config/gnome-initial-setup-sysusers.conf 
%{install-root}%{sysusersdir}/gnome-initial-setup.conf
+    - install -m 644 gnome-initial-setup-config/gnome-initial-setup-sysusers.conf
+      %{install-root}%{sysusersdir}/gnome-initial-setup.conf
diff --git a/elements/core/gnome-keyring.bst b/elements/core/gnome-keyring.bst
index 47169a17..d3ba54cf 100644
--- a/elements/core/gnome-keyring.bst
+++ b/elements/core/gnome-keyring.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-keyring.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-keyring/40/gnome-keyring-40.0.tar.xz
+  ref: a3d24db08ee2fdf240fbbf0971a98c8ee295aa0e1a774537f4ea938038a3b931
 build-depends:
 - freedesktop-sdk.bst:components/docbook-xsl.bst
 - freedesktop-sdk.bst:components/libxslt.bst
diff --git a/elements/core/gnome-logs.bst b/elements/core/gnome-logs.bst
index 1c02fed1..a1dc3ba3 100644
--- a/elements/core/gnome-logs.bst
+++ b/elements/core/gnome-logs.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-logs.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-logs/3.36/gnome-logs-3.36.0.tar.xz
+  ref: 44766b61a6899e1b4c51ed7a8840608e6b9277f341f856a1e5c08dbd7a733670
 build-depends:
 - sdk/appstream-glib.bst
 - freedesktop-sdk.bst:components/itstool.bst
diff --git a/elements/core/gnome-maps.bst b/elements/core/gnome-maps.bst
index c149b5f9..6e04446a 100644
--- a/elements/core/gnome-maps.bst
+++ b/elements/core/gnome-maps.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-maps.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-maps/40/gnome-maps-40.0.tar.xz
+  ref: ec11dc6c9eea2698592500daf3ad673c1e4f64ebeb0d3d2823fb8655bb5d4a49
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/core/gnome-menus.bst b/elements/core/gnome-menus.bst
index 20bd3b11..bec9cc44 100644
--- a/elements/core/gnome-menus.bst
+++ b/elements/core/gnome-menus.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-menus.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-menus/3.36/gnome-menus-3.36.0.tar.xz
+  ref: d9348f38bde956fc32753b28c1cde19c175bfdbf1f4d5b06003b3aa09153bb1f
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core/gnome-music.bst b/elements/core/gnome-music.bst
index 5412f758..f647f1b0 100644
--- a/elements/core/gnome-music.bst
+++ b/elements/core/gnome-music.bst
@@ -1,20 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-music.git
-  track: master
-  submodules:
-    subprojects/libgd:
-      checkout: true
-      url: gitlab_gnome_org:GNOME/libgd.git
-    subprojects/gfm:
-      checkout: true
-      url: gitlab_gnome_org:mschraal/gfm.git
-    subprojects/shared-modules:
-      checkout: false
-      url: github_com:flathub/shared-modules.git
-
+- kind: tar
+  url: gnome_downloads:gnome-music/40/gnome-music-40.0.tar.xz
+  ref: 68e09b2cdb0115c30d130e14b2afc561dbf5248f50760e4519733326498358b6
 build-depends:
 - freedesktop-sdk.bst:components/itstool.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-photos.bst b/elements/core/gnome-photos.bst
index d9c2bd34..a429b049 100644
--- a/elements/core/gnome-photos.bst
+++ b/elements/core/gnome-photos.bst
@@ -1,12 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-photos.git
-  track: master
-  submodules:
-    subprojects/libgd:
-      checkout: true
-      url: gitlab_gnome_org:GNOME/libgd.git
+- kind: tar
+  url: gnome_downloads:gnome-photos/40/gnome-photos-40.0.tar.xz
+  ref: e02d73e138af8b2868b5cad7faa1bdd278aeade3b6c3c92836511a4e6f3af1af
 build-depends:
 - freedesktop-sdk.bst:components/desktop-file-utils.bst
 - freedesktop-sdk.bst:components/itstool.bst
diff --git a/elements/core/gnome-remote-desktop.bst b/elements/core/gnome-remote-desktop.bst
index 2ccdcbde..09b4653d 100644
--- a/elements/core/gnome-remote-desktop.bst
+++ b/elements/core/gnome-remote-desktop.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-remote-desktop.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gnome-remote-desktop/40/gnome-remote-desktop-40.0.tar.xz
+  ref: 6c0a0faa17891f8c5d232cd85ddec0618fa0ef76c39f952ef431abfadaf29f7e
 build-depends:
 - freedesktop-sdk.bst:components/systemd.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-screenshot.bst b/elements/core/gnome-screenshot.bst
index 093ad7f0..22c60324 100644
--- a/elements/core/gnome-screenshot.bst
+++ b/elements/core/gnome-screenshot.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-screenshot.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-screenshot/40/gnome-screenshot-40.0.tar.xz
+  ref: 368ca95a39e39dc2406c849e8c4205e3f574acdd874c30741873455e3d21a5e2
 build-depends:
 - sdk/appstream-glib.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-session.bst b/elements/core/gnome-session.bst
index 6f1a5d80..3d15c711 100644
--- a/elements/core/gnome-session.bst
+++ b/elements/core/gnome-session.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-session.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gnome-session/40/gnome-session-40.1.1.tar.xz
+  ref: 9c787829ee32e13e1508b9aee2b1d9ba42a02c48e6c8094e34f3e7f92af4df82
 build-depends:
 - freedesktop-sdk.bst:components/docbook-xsl.bst
 - freedesktop-sdk.bst:components/libxslt.bst
diff --git a/elements/core/gnome-settings-daemon.bst b/elements/core/gnome-settings-daemon.bst
index 3f911301..523cf6c1 100644
--- a/elements/core/gnome-settings-daemon.bst
+++ b/elements/core/gnome-settings-daemon.bst
@@ -1,13 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-settings-daemon.git
-  track: master
-  submodules:
-    subprojects/gvc:
-      checkout: true
-      url: gitlab_gnome_org:GNOME/libgnome-volume-control.git
-
+- kind: tar
+  url: gnome_downloads:gnome-settings-daemon/40/gnome-settings-daemon-40.0.1.tar.xz
+  ref: 37dfac1b69a53e2e499228420259d6e134c1c06b74530af88fa855bda1187b21
 build-depends:
 - freedesktop-sdk.bst:components/perl.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-shell-extensions.bst b/elements/core/gnome-shell-extensions.bst
index 4eed3b9b..9ab63294 100644
--- a/elements/core/gnome-shell-extensions.bst
+++ b/elements/core/gnome-shell-extensions.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-shell-extensions.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-shell-extensions/40/gnome-shell-extensions-40.0.tar.xz
+  ref: 172d85b2819ac9825c0ce91ed7324394d2e03b6569c4e8b60edd8a9e2f990a96
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/core/gnome-shell.bst b/elements/core/gnome-shell.bst
index accef8c9..77a2e89f 100644
--- a/elements/core/gnome-shell.bst
+++ b/elements/core/gnome-shell.bst
@@ -1,14 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-shell.git
-  track: master
-  submodules:
-    subprojects/gvc:
-      checkout: true
-      url: gitlab_gnome_org:GNOME/libgnome-volume-control.git
-
+- kind: tar
+  url: gnome_downloads:gnome-shell/40/gnome-shell-40.0.tar.xz
+  ref: bce71f402dfaa9c5e269bf65bf48a22343d896e6cf9a2c34669392d7fbf68478
 build-depends:
 - sdk-deps/sassc.bst
 - freedesktop-sdk.bst:components/asciidoc.bst
diff --git a/elements/core/gnome-software.bst b/elements/core/gnome-software.bst
index 01157758..118fcaa4 100644
--- a/elements/core/gnome-software.bst
+++ b/elements/core/gnome-software.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-software.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-software/40/gnome-software-40.0.tar.xz
+  ref: e447894cee8be886b7b3f8e4db5f42d11e36a97030959d2d7a789c7fb28d2e51
 build-depends:
 - core/sysprof.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core/gnome-system-monitor.bst b/elements/core/gnome-system-monitor.bst
index 516e7936..45374e9f 100644
--- a/elements/core/gnome-system-monitor.bst
+++ b/elements/core/gnome-system-monitor.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-system-monitor.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-system-monitor/40/gnome-system-monitor-40.0.tar.xz
+  ref: 64e550f7f55552b09a79e1620aaebaae705d1668e4538e604e14c0ca323ae756
 build-depends:
 - freedesktop-sdk.bst:components/itstool.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-terminal.bst b/elements/core/gnome-terminal.bst
index 86d73ce7..bd81ce09 100644
--- a/elements/core/gnome-terminal.bst
+++ b/elements/core/gnome-terminal.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-terminal.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gnome-terminal/3.40/gnome-terminal-3.40.0.tar.xz
+  ref: 9d2fe397be0b8b50c4ef96634a2e0480ad9ff56d1431582ecc804907e11fa74e
 build-depends:
 - core/gnome-shell.bst
 - freedesktop-sdk.bst:components/docbook-xsl.bst
diff --git a/elements/core/gnome-tour.bst b/elements/core/gnome-tour.bst
index 29c7ecc2..c581445d 100644
--- a/elements/core/gnome-tour.bst
+++ b/elements/core/gnome-tour.bst
@@ -1,9 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-tour.git
-  track: master
-- kind: cargo
+- kind: tar
+  url: gnome_downloads:gnome-tour/40/gnome-tour-40.0.tar.xz
+  ref: 7063223869a074727414bec7db738d8506216ee84ccfc3bca7dac52e498c1bf9
 build-depends:
 - freedesktop-sdk.bst:extensions/rust/rust.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-user-docs.bst b/elements/core/gnome-user-docs.bst
index a937ff57..4dd0d808 100644
--- a/elements/core/gnome-user-docs.bst
+++ b/elements/core/gnome-user-docs.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-user-docs.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-user-docs/40/gnome-user-docs-40.0.tar.xz
+  ref: 3174480d218da25828b377e105117c135d13b7a2f566fd317e32748f37263a91
 build-depends:
 - sdk/yelp-tools.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core/gnome-user-share.bst b/elements/core/gnome-user-share.bst
index 8dfafed1..c8a11863 100644
--- a/elements/core/gnome-user-share.bst
+++ b/elements/core/gnome-user-share.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-user-share.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gnome-user-share/3.34/gnome-user-share-3.34.0.tar.xz
+  ref: 1d0c2a8eb4fcc4bff85c5edde9346ba6094e356921d2955f180d44b2d3642913
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 
diff --git a/elements/core/gnome-weather.bst b/elements/core/gnome-weather.bst
index 68fbe7d4..306f5b45 100644
--- a/elements/core/gnome-weather.bst
+++ b/elements/core/gnome-weather.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gnome-weather.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gnome-weather/40/gnome-weather-40.0.tar.xz
+  ref: 2a35a73ab2408762181d8650b037205c17ef7bcb8dff3cf0b34af1a2de66aeef
 build-depends:
 - sdk/appstream-glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core/mutter.bst b/elements/core/mutter.bst
index cc883002..f052edb0 100644
--- a/elements/core/mutter.bst
+++ b/elements/core/mutter.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/mutter.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:mutter/40/mutter-40.0.tar.xz
+  ref: 7a71b312e5a667c5374895188a506a3f6b671768bcb362b68efdc562773d198e
 build-depends:
 - core/sysprof.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core/nautilus.bst b/elements/core/nautilus.bst
index 87586269..5a661567 100644
--- a/elements/core/nautilus.bst
+++ b/elements/core/nautilus.bst
@@ -1,12 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/nautilus.git
-  track: master
-  submodules:
-    subprojects/libgd:
-      checkout: true
-      url: gitlab_gnome_org:GNOME/libgd.git
+- kind: tar
+  url: gnome_downloads:nautilus/40/nautilus-40.0.tar.xz
+  ref: 7d5002617895ad372e52f7a8e302a32343326739f088fa8df6104af709cc4d40
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/core/orca.bst b/elements/core/orca.bst
index e184c6bb..ad2f212f 100644
--- a/elements/core/orca.bst
+++ b/elements/core/orca.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/orca.git
-  track: master
+- kind: tar
+  url: gnome_downloads:orca/40/orca-40.0.tar.xz
+  ref: 0000eee390b906a0f5611eb601633bd5ec03d231662ee7d865d1016459fb0043
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core/rygel.bst b/elements/core/rygel.bst
index 965331b6..07367257 100644
--- a/elements/core/rygel.bst
+++ b/elements/core/rygel.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/rygel.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:rygel/0.40/rygel-0.40.1.tar.xz
+  ref: 4240d777599c8cd09e67da44ccb395d0a6dc78479d809cd6219822c5b568a32d
 build-depends:
 - sdk/vala.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/simple-scan.bst b/elements/core/simple-scan.bst
index 03d4cc60..e4c813c1 100644
--- a/elements/core/simple-scan.bst
+++ b/elements/core/simple-scan.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/simple-scan.git
-  track: master
+- kind: tar
+  url: gnome_downloads:simple-scan/40/simple-scan-40.0.tar.xz
+  ref: 13811bb2a8619e63a43fc2ef6b71359f2d5c4084c6d5c8b3aad61724b20751af
 build-depends:
 - sdk/vala.bst
 - freedesktop-sdk.bst:components/itstool.bst
diff --git a/elements/core/sushi.bst b/elements/core/sushi.bst
index 24d364e7..0131d2cf 100644
--- a/elements/core/sushi.bst
+++ b/elements/core/sushi.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/sushi.git
-  track: master
+- kind: tar
+  url: gnome_downloads:sushi/3.38/sushi-3.38.0.tar.xz
+  ref: 5040029f7ffb6fd5491ca2db94202cca2450c3a56afba515d9d53713d2c4986e
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/core/sysprof.bst b/elements/core/sysprof.bst
index 47198457..7647adf0 100644
--- a/elements/core/sysprof.bst
+++ b/elements/core/sysprof.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/sysprof.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:sysprof/3.40/sysprof-3.40.1.tar.xz
+  ref: c25000d6a20e8c4d314f5c861a1f70d7c3e2027117437fd9198fa811b9fc7437
 build-depends:
 - freedesktop-sdk.bst:components/itstool.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/totem.bst b/elements/core/totem.bst
index 34059b5e..fd98aebd 100644
--- a/elements/core/totem.bst
+++ b/elements/core/totem.bst
@@ -1,15 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/totem.git
-  track: master
-  submodules:
-    subprojects/libgd:
-      checkout: true
-      url: gitlab_gnome_org:GNOME/libgd.git
-    flatpak/shared-modules:
-      checkout: false
-      url: github_com:flathub/shared-modules.git
+- kind: tar
+  url: gnome_downloads:totem/3.38/totem-3.38.0.tar.xz
+  ref: a829f2b5aa0435aa431816153193d5547fade9eb8d489f56be22afbe651c432f
 build-depends:
 - sdk/appstream-glib.bst
 - freedesktop-sdk.bst:components/itstool.bst
diff --git a/elements/freedesktop-sdk.bst b/elements/freedesktop-sdk.bst
index 0b14f9e1..a0242d8e 100644
--- a/elements/freedesktop-sdk.bst
+++ b/elements/freedesktop-sdk.bst
@@ -4,6 +4,7 @@ sources:
   url: https://gitlab.com/freedesktop-sdk/freedesktop-sdk.git
   track: release/20.08
   track-tags: true
+  ref: freedesktop-sdk-20.08.8-0-gfbcc9f667d93cb5f106e1bd3ed535f6d0c88f76a
 config:
   options:
     target_arch: '%{arch}'
diff --git a/elements/iso/eos-installer.bst b/elements/iso/eos-installer.bst
index 9de6fe6a..5d329ed2 100644
--- a/elements/iso/eos-installer.bst
+++ b/elements/iso/eos-installer.bst
@@ -13,6 +13,7 @@ sources:
     ext/libglnx:
       url: gitlab_gnome_org:GNOME/libglnx.git
       checkout: true
+  ref: Release_3.9.3-0-g8d8b6ccda3821f0836c92f3c331c721fb27d9f02
 - kind: patch
   path: files/eos-installer/vfat-eosimages.patch
 - kind: patch
diff --git a/elements/iso/isomd5sum.bst b/elements/iso/isomd5sum.bst
index 39688a35..85af2ffc 100644
--- a/elements/iso/isomd5sum.bst
+++ b/elements/iso/isomd5sum.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:rhinstaller/isomd5sum/archive/1.2.3.tar.gz
 
+  ref: b0e706f470c336f689f43ddea33a85aed43fa7e5276221c7ac930e22f795c93c
 depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
 - freedesktop-sdk.bst:components/python3.bst
diff --git a/elements/iso/libburn.bst b/elements/iso/libburn.bst
index 4de4911d..2fadc935 100644
--- a/elements/iso/libburn.bst
+++ b/elements/iso/libburn.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: libburnia:libburn-1.5.2.pl01.tar.gz
 
+  ref: 881903ab5c9b3314ce60029b6d709697b79d4ff5ad7efc14d06dddab054b37f7
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/iso/libisoburn.bst b/elements/iso/libisoburn.bst
index 9c4f780e..e4f9e315 100644
--- a/elements/iso/libisoburn.bst
+++ b/elements/iso/libisoburn.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: libburnia:libisoburn-1.5.2.tar.gz
 
+  ref: cc720bc9511d8e0b09365e2c8b0e40817986be308cd96ca2705c807c955590ec
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/iso/libisofs.bst b/elements/iso/libisofs.bst
index 20ea67ee..14b19666 100644
--- a/elements/iso/libisofs.bst
+++ b/elements/iso/libisofs.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: libburnia:libisofs-1.5.2.tar.gz
 
+  ref: ef5a139600b3e688357450e52381e40ec26a447d35eb8d21524598c7b1675500
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/openh264-extension.bst b/elements/openh264-extension.bst
index fc287ced..8f2812d6 100644
--- a/elements/openh264-extension.bst
+++ b/elements/openh264-extension.bst
@@ -5,6 +5,7 @@ sources:
   url: https://gitlab.com/freedesktop-sdk/openh264-extension.git
   track: master
 
+  ref: openh264-2.0.0-4-0-g7191bc88fbeed3ac842543706f856cb6dde99bc9
 config:
   options:
     release_kind: stable
diff --git a/elements/sdk-deps/bubblewrap.bst b/elements/sdk-deps/bubblewrap.bst
index 83efe8fc..01e1e72e 100644
--- a/elements/sdk-deps/bubblewrap.bst
+++ b/elements/sdk-deps/bubblewrap.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:containers/bubblewrap/releases/download/v0.4.1/bubblewrap-0.4.1.tar.xz
 
+  ref: b9c69b9b1c61a608f34325c8e1a495229bacf6e4a07cbb0c80cf7a814d7ccc03
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/sdk-deps/gvfs.bst b/elements/sdk-deps/gvfs.bst
index 253b5a00..ece282fe 100644
--- a/elements/sdk-deps/gvfs.bst
+++ b/elements/sdk-deps/gvfs.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gvfs.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gvfs/1.48/gvfs-1.48.0.tar.xz
+  ref: 3834797751c4e9f8729e774dee142a474f3361cbc0c12b647606433793eae939
 build-depends:
 - freedesktop-sdk.bst:components/systemd.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/sdk-deps/ibus.bst b/elements/sdk-deps/ibus.bst
index 6b8bfb65..a3778749 100644
--- a/elements/sdk-deps/ibus.bst
+++ b/elements/sdk-deps/ibus.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:ibus/ibus/releases/download/1.5.22/ibus-1.5.22.tar.gz
+  ref: 8170eba58c28aa4818970751ebdeada728ebb63d535967a5c5f5c21b0017be4a
 build-depends:
 - sdk/gobject-introspection.bst
 - freedesktop-sdk.bst:components/iso-codes.bst
diff --git a/elements/sdk-deps/libsass.bst b/elements/sdk-deps/libsass.bst
index 12a3b53d..35bafce8 100644
--- a/elements/sdk-deps/libsass.bst
+++ b/elements/sdk-deps/libsass.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://github.com/sass/libsass/archive/3.5.0.tar.gz
 
+  ref: 9d499927329c7f8816ab67c571fb7cc0ea21d38c6f47c7c58c98de99ef7645eb
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/sdk-deps/sassc.bst b/elements/sdk-deps/sassc.bst
index 5928a24f..0b392144 100644
--- a/elements/sdk-deps/sassc.bst
+++ b/elements/sdk-deps/sassc.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://github.com/sass/sassc/releases/download/3.4.8/sassc-3.4.8.tar.gz
 
+  ref: d61587b6c084a54e602650c1d845928a20c8d309a0eeec6b1d2499489867ce03
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/sdk-deps/xdg-dbus-proxy.bst b/elements/sdk-deps/xdg-dbus-proxy.bst
index 6638c56c..132e7270 100644
--- a/elements/sdk-deps/xdg-dbus-proxy.bst
+++ b/elements/sdk-deps/xdg-dbus-proxy.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:flatpak/xdg-dbus-proxy/releases/download/0.1.2/xdg-dbus-proxy-0.1.2.tar.xz
 
+  ref: 1749d6f9f46dcc9edc87725641cf56cf91dcad1b01707891ea0850c1000c520f
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/sdk/adobe-source-code-pro-fonts.bst b/elements/sdk/adobe-source-code-pro-fonts.bst
index 32990009..ab8680e6 100644
--- a/elements/sdk/adobe-source-code-pro-fonts.bst
+++ b/elements/sdk/adobe-source-code-pro-fonts.bst
@@ -18,6 +18,7 @@ config:
 sources:
 - kind: tar
   url: github_com:adobe-fonts/source-code-pro/archive/2.010R-ro/1.030R-it.tar.gz
+  ref: 3ee5a0d04e6586f12de038cb33ec963f137bbc4907ae1e10a6333478a2b884f8
 - kind: local
   path: files/font-conf/adobe-source-code-pro.conf
   directory: config
diff --git a/elements/sdk/adwaita-icon-theme.bst b/elements/sdk/adwaita-icon-theme.bst
index 660485f2..0c523dfd 100644
--- a/elements/sdk/adwaita-icon-theme.bst
+++ b/elements/sdk/adwaita-icon-theme.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/adwaita-icon-theme.git
-  track: master
+- kind: tar
+  url: gnome_downloads:adwaita-icon-theme/40/adwaita-icon-theme-40.0.tar.xz
+  ref: 1f2bca34f60357ab91b7db91c5e919ad36775e094138dffc870bb5f97b0dbbb2
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/sdk/appstream-glib.bst b/elements/sdk/appstream-glib.bst
index e829ef05..0a359d35 100644
--- a/elements/sdk/appstream-glib.bst
+++ b/elements/sdk/appstream-glib.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: github_com:hughsie/appstream-glib.git
-  track: master
-
+- kind: tar
+  url: people_freedesktop_org:~hughsient/appstream-glib/releases/appstream-glib-0.7.18.tar.xz
+  ref: ca1ed22e3bde3912cb903aaa7de085d55771da454f1c0573fd9608e1de9c4002
 build-depends:
 - sdk/gobject-introspection.bst
 - freedesktop-sdk.bst:components/docbook-xsl.bst
diff --git a/elements/sdk/at-spi2-atk.bst b/elements/sdk/at-spi2-atk.bst
index 143ed424..533d4866 100644
--- a/elements/sdk/at-spi2-atk.bst
+++ b/elements/sdk/at-spi2-atk.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/at-spi2-atk.git
-  track: master
+- kind: tar
+  url: gnome_downloads:at-spi2-atk/2.38/at-spi2-atk-2.38.0.tar.xz
+  ref: cfa008a5af822b36ae6287f18182c40c91dd699c55faa38605881ed175ca464f
 build-depends:
 - freedesktop-sdk.bst:components/libxml2.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/sdk/at-spi2-core.bst b/elements/sdk/at-spi2-core.bst
index f7279096..45869a54 100644
--- a/elements/sdk/at-spi2-core.bst
+++ b/elements/sdk/at-spi2-core.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/at-spi2-core.git
-  track: master
+- kind: tar
+  url: gnome_downloads:at-spi2-core/2.40/at-spi2-core-2.40.0.tar.xz
+  ref: 4196a7d30a0051e52a67b8ce4283fe79ae5e4e14a725719934565adf1d333429
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/atk.bst b/elements/sdk/atk.bst
index d99da025..10836215 100644
--- a/elements/sdk/atk.bst
+++ b/elements/sdk/atk.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/atk.git
-  track: master
+- kind: tar
+  url: gnome_downloads:atk/2.36/atk-2.36.0.tar.xz
+  ref: fb76247e369402be23f1f5c65d38a9639c1164d934e40f6a9cf3c9e96b652788
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/cantarell-fonts.bst b/elements/sdk/cantarell-fonts.bst
index df559d20..daacc0d7 100644
--- a/elements/sdk/cantarell-fonts.bst
+++ b/elements/sdk/cantarell-fonts.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:cantarell-fonts/0.301/cantarell-fonts-0.301.tar.xz
+  ref: 3d35db0ac03f9e6b0d5a53577591b714238985f4cfc31a0aa17f26cd74675e83
 build-depends:
 - sdk/appstream-glib.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/sdk/enchant-2.bst b/elements/sdk/enchant-2.bst
index ec5acfe0..2e0814c8 100644
--- a/elements/sdk/enchant-2.bst
+++ b/elements/sdk/enchant-2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:AbiWord/enchant/releases/download/v2.2.12/enchant-2.2.12.tar.gz
+  ref: 6b9bc58ae714ee7f5335ade966f4ac5718d5339e280cc9e1cca9ab278c06227e
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/sdk/fcitx.bst b/elements/sdk/fcitx.bst
index 0bc63a2e..b9d6365e 100644
--- a/elements/sdk/fcitx.bst
+++ b/elements/sdk/fcitx.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:fcitx/fcitx/archive/4.2.9.7.tar.gz
 
+  ref: 92241f0138a465347ce4dbfbcea22b513749ab7709c03e8dceb33277111ca845
 build-depends:
 - freedesktop-sdk.bst:components/extra-cmake-modules.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
diff --git a/elements/sdk/gcab.bst b/elements/sdk/gcab.bst
index db67d407..4678fee2 100644
--- a/elements/sdk/gcab.bst
+++ b/elements/sdk/gcab.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gcab.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gcab/1.4/gcab-1.4.tar.xz
+  ref: 67a5fa9be6c923fbc9197de6332f36f69a33dadc9016a2b207859246711c048f
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/gcr.bst b/elements/sdk/gcr.bst
index c0886eee..a3ead784 100644
--- a/elements/sdk/gcr.bst
+++ b/elements/sdk/gcr.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gcr.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gcr/3.40/gcr-3.40.0.tar.xz
+  ref: b9d3645a5fd953a54285cc64d4fc046736463dbd4dcc25caf5c7b59bed3027f5
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/gdk-pixbuf.bst b/elements/sdk/gdk-pixbuf.bst
index 5c4f3977..fef893f2 100644
--- a/elements/sdk/gdk-pixbuf.bst
+++ b/elements/sdk/gdk-pixbuf.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gdk-pixbuf.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gdk-pixbuf/2.42/gdk-pixbuf-2.42.6.tar.xz
+  ref: c4a6b75b7ed8f58ca48da830b9fa00ed96d668d3ab4b1f723dcf902f78bde77f
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/geoclue.bst b/elements/sdk/geoclue.bst
index d370a719..ef39f9f9 100644
--- a/elements/sdk/geoclue.bst
+++ b/elements/sdk/geoclue.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://gitlab.freedesktop.org/geoclue/geoclue/-/archive/2.5.1/geoclue-2.5.1.tar.gz
 
+  ref: f552ba69ce32519f78858c48215680e364b9b01197550df9327c5a01e44a9913
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/gjs.bst b/elements/sdk/gjs.bst
index b355a351..93849546 100644
--- a/elements/sdk/gjs.bst
+++ b/elements/sdk/gjs.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gjs.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gjs/1.68/gjs-1.68.0.tar.xz
+  ref: f00e74a00e81ab61bb92669e0f1c8bb613cc019586097f06aed0572efcaf1aef
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/sdk/glib-networking.bst b/elements/sdk/glib-networking.bst
index 2655da7b..20097bb7 100644
--- a/elements/sdk/glib-networking.bst
+++ b/elements/sdk/glib-networking.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/glib-networking.git
-  track: master
+- kind: tar
+  url: gnome_downloads:glib-networking/2.68/glib-networking-2.68.1.tar.xz
+  ref: d05d8bd124a9f53fc2b93b18f2386d512e4f48bc5a80470a7967224f3bf53b30
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/sdk/glib.bst b/elements/sdk/glib.bst
index 78fedd3f..b712ebe6 100644
--- a/elements/sdk/glib.bst
+++ b/elements/sdk/glib.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/glib.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:glib/2.68/glib-2.68.1.tar.xz
+  ref: 241654b96bd36b88aaa12814efc4843b578e55d47440103727959ac346944333
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/sdk/gobject-introspection.bst b/elements/sdk/gobject-introspection.bst
index 343b2810..cc0dc941 100644
--- a/elements/sdk/gobject-introspection.bst
+++ b/elements/sdk/gobject-introspection.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gobject-introspection.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gobject-introspection/1.68/gobject-introspection-1.68.0.tar.xz
+  ref: d229242481a201b84a0c66716de1752bca41db4133672cfcfb37c93eb6e54a27
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:components/bison.bst
diff --git a/elements/sdk/graphene.bst b/elements/sdk/graphene.bst
index 1421b2f5..35eaa10e 100644
--- a/elements/sdk/graphene.bst
+++ b/elements/sdk/graphene.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: github_com:ebassi/graphene.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:graphene/1.10/graphene-1.10.6.tar.xz
+  ref: 80ae57723e4608e6875626a88aaa6f56dd25df75024bd16e9d77e718c3560b25
 build-depends:
 - sdk/gobject-introspection.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/sdk/gsettings-desktop-schemas.bst b/elements/sdk/gsettings-desktop-schemas.bst
index ffae7691..4549d0b3 100644
--- a/elements/sdk/gsettings-desktop-schemas.bst
+++ b/elements/sdk/gsettings-desktop-schemas.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gsettings-desktop-schemas.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gsettings-desktop-schemas/40/gsettings-desktop-schemas-40.0.tar.xz
+  ref: f1b83bf023c0261eacd0ed36066b76f4a520bbcb14bb69c402b7959257125685
 build-depends:
 - sdk/gobject-introspection.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/sdk/gtk+-3.bst b/elements/sdk/gtk+-3.bst
index e0dddebd..f80838a3 100644
--- a/elements/sdk/gtk+-3.bst
+++ b/elements/sdk/gtk+-3.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gtk.git
-  track: gtk-3-24
-
+- kind: tar
+  url: gnome_downloads:gtk+/3.24/gtk+-3.24.29.tar.xz
+  ref: f57ec4ade8f15cab0c23a80dcaee85b876e70a8823d9105f067ce335a8268caa
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/gtk-doc.bst b/elements/sdk/gtk-doc.bst
index ac03b272..999c28e2 100644
--- a/elements/sdk/gtk-doc.bst
+++ b/elements/sdk/gtk-doc.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gtk-doc.git
-  track: master
+- kind: tar
+  url: gnome_downloads:gtk-doc/1.33/gtk-doc-1.33.2.tar.xz
+  ref: cc1b709a20eb030a278a1f9842a362e00402b7f834ae1df4c1998a723152bf43
 build-depends:
 - freedesktop-sdk.bst:components/itstool.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/sdk/gtk.bst b/elements/sdk/gtk.bst
index 6733837a..d01146d2 100644
--- a/elements/sdk/gtk.bst
+++ b/elements/sdk/gtk.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gtk.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:gtk/4.2/gtk-4.2.0.tar.xz
+  ref: e975f286e911666a79b6bcf486e6f99b0bd9d2b4cc348d19bce487a0b1c97072
 build-depends:
 - sdk-deps/sassc.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/gtksourceview.bst b/elements/sdk/gtksourceview.bst
index 7bd93d5c..a97b5b05 100644
--- a/elements/sdk/gtksourceview.bst
+++ b/elements/sdk/gtksourceview.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/gtksourceview.git
-  track: 'gtksourceview-4-8'
-
+- kind: tar
+  url: gnome_downloads:gtksourceview/4.8/gtksourceview-4.8.1.tar.xz
+  ref: d163d71b5fcafbc5b1eec6dd841edbdbcddd3a7511cd5fdcffd86b8bbfe69ac1
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/json-glib.bst b/elements/sdk/json-glib.bst
index c504e38e..890e2c81 100644
--- a/elements/sdk/json-glib.bst
+++ b/elements/sdk/json-glib.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/json-glib.git
-  track: master
+- kind: tar
+  url: gnome_downloads:json-glib/1.6/json-glib-1.6.2.tar.xz
+  ref: a33d66c6d038bda46b910c6c6d59c4e15db014e363dc997a0414c2e07d134f24
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/krb5.bst b/elements/sdk/krb5.bst
index 2c84f2e8..a3d7d3b2 100644
--- a/elements/sdk/krb5.bst
+++ b/elements/sdk/krb5.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://kerberos.org/dist/krb5/1.19/krb5-1.19.1.tar.gz
+  ref: fa16f87eb7e3ec3586143c800d7eaff98b5e0dcdf0772af7d98612e49dbeb20b
 - kind: local
   path: files/krb5
   directory: krb5-config
diff --git a/elements/sdk/libgee.bst b/elements/sdk/libgee.bst
index 04a65e85..3b90a50e 100644
--- a/elements/sdk/libgee.bst
+++ b/elements/sdk/libgee.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libgee.git
-  track: master
+- kind: tar
+  url: gnome_downloads:libgee/0.20/libgee-0.20.4.tar.xz
+  ref: 524c1bf390f9cdda4fbd9a47b269980dc64ab5280f0801b53bc69d782c72de0e
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/sdk/libhandy.bst b/elements/sdk/libhandy.bst
index a6ee525c..10c94052 100644
--- a/elements/sdk/libhandy.bst
+++ b/elements/sdk/libhandy.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libhandy.git
-  track: master
+- kind: tar
+  url: gnome_downloads:libhandy/1.2/libhandy-1.2.2.tar.xz
+  ref: 47ffd2865d02bd1ca579522deadd7e2f95362f1f202462fd5eeae2b81668b048
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/libnotify.bst b/elements/sdk/libnotify.bst
index d535a60f..0c058072 100644
--- a/elements/sdk/libnotify.bst
+++ b/elements/sdk/libnotify.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libnotify.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:libnotify/0.7/libnotify-0.7.9.tar.xz
+  ref: 66c0517ed16df7af258e83208faaf5069727dfd66995c4bbc51c16954d674761
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/librest.bst b/elements/sdk/librest.bst
index aa0a216d..5d05a250 100644
--- a/elements/sdk/librest.bst
+++ b/elements/sdk/librest.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/librest.git
-  track: librest-0-7
+- kind: tar
+  url: gnome_downloads:rest/0.8/rest-0.8.1.tar.xz
+  ref: 0513aad38e5d3cedd4ae3c551634e3be1b9baaa79775e53b2dba9456f15b01c9
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/librsvg.bst b/elements/sdk/librsvg.bst
index b066fdde..88727056 100644
--- a/elements/sdk/librsvg.bst
+++ b/elements/sdk/librsvg.bst
@@ -1,9 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/librsvg.git
-  track: librsvg-2.50
-- kind: cargo
+- kind: tar
+  url: gnome_downloads:librsvg/2.51/librsvg-2.51.1.tar.xz
+  ref: 7d72c0de6cd1a767922328a214e346ce7e12fbfaf0a50de59d0e502532c1c75e
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/libsecret.bst b/elements/sdk/libsecret.bst
index 7e5ee804..ccc8cd6a 100644
--- a/elements/sdk/libsecret.bst
+++ b/elements/sdk/libsecret.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libsecret.git
-  track: master
+- kind: tar
+  url: gnome_downloads:libsecret/0.20/libsecret-0.20.4.tar.xz
+  ref: 325a4c54db320c406711bf2b55e5cb5b6c29823426aa82596a907595abb39d28
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/libsoup-2.4.bst b/elements/sdk/libsoup-2.4.bst
index 6744eec3..861b9cfa 100644
--- a/elements/sdk/libsoup-2.4.bst
+++ b/elements/sdk/libsoup-2.4.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libsoup.git
-  track: gnome-3-38
-
+- kind: tar
+  url: gnome_downloads:libsoup/2.72/libsoup-2.72.0.tar.xz
+  ref: 170c3f8446b0f65f8e4b93603349172b1085fb8917c181d10962f02bb85f5387
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/libsoup.bst b/elements/sdk/libsoup.bst
index 3843ec95..19a00ceb 100644
--- a/elements/sdk/libsoup.bst
+++ b/elements/sdk/libsoup.bst
@@ -1,10 +1,9 @@
 kind: meson
 
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/libsoup.git
-  track: master
-
+- kind: tar
+  url: gnome_downloads:libsoup/2.99/libsoup-2.99.4.tar.xz
+  ref: 8a4d39e908da97811db2f7c773b08348a360a8e1e988404332e8ff071263af3e
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/libwpe.bst b/elements/sdk/libwpe.bst
index 730f20b7..c73bf20a 100644
--- a/elements/sdk/libwpe.bst
+++ b/elements/sdk/libwpe.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://wpewebkit.org/releases/libwpe-1.10.0.tar.xz
 
+  ref: 2415e270d45e3595ed4052bc105f733744dc2d3677e12ff4a831e5029841084d
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
 
diff --git a/elements/sdk/pango.bst b/elements/sdk/pango.bst
index 69d6ccd4..7b758c3a 100644
--- a/elements/sdk/pango.bst
+++ b/elements/sdk/pango.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/pango.git
-  track: master
+- kind: tar
+  url: gnome_downloads:pango/1.48/pango-1.48.4.tar.xz
+  ref: 418913fb062071a075846244989d4a67aa5c80bf0eae8ee4555a092fd566a37a
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/pinentry.bst b/elements/sdk/pinentry.bst
index bfb69cd9..bd350156 100644
--- a/elements/sdk/pinentry.bst
+++ b/elements/sdk/pinentry.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://www.gnupg.org/ftp/gcrypt/pinentry/pinentry-1.1.1.tar.bz2
 
+  ref: cd12a064013ed18e2ee8475e669b9f58db1b225a0144debdb85a68cecddba57f
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 
diff --git a/elements/sdk/pygobject.bst b/elements/sdk/pygobject.bst
index e5abb0be..c47ab438 100644
--- a/elements/sdk/pygobject.bst
+++ b/elements/sdk/pygobject.bst
@@ -1,8 +1,8 @@
 kind: distutils
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/pygobject.git
-  track: master
+- kind: tar
+  url: gnome_downloads:pygobject/3.40/pygobject-3.40.1.tar.xz
+  ref: 00c6d591f4cb40c335ab1fd3e8c17869ba15cfda54416fe363290af766790035
 build-depends:
 - freedesktop-sdk.bst:components/pkg-config.bst
 depends:
diff --git a/elements/sdk/tracker.bst b/elements/sdk/tracker.bst
index d16ad9dc..b2467531 100644
--- a/elements/sdk/tracker.bst
+++ b/elements/sdk/tracker.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/tracker.git
-  track: master
+- kind: tar
+  url: gnome_downloads:tracker/3.1/tracker-3.1.1.tar.xz
+  ref: 4376e2e98454066f44f7a242e45b99b3bfe4c03b67fab19abb0ed586ca748ae7
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/vala-tarball.bst b/elements/sdk/vala-tarball.bst
index 5ce8cfb4..91bd8c9c 100644
--- a/elements/sdk/vala-tarball.bst
+++ b/elements/sdk/vala-tarball.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:vala/0.36/vala-0.36.20.tar.xz
+  ref: be960a87841d85ff76cbd0e10eb691675190e54bd690d76982b3fb94a1fc67a7
 build-depends:
 - freedesktop-sdk.bst:components/bison.bst
 - freedesktop-sdk.bst:components/flex.bst
diff --git a/elements/sdk/vala.bst b/elements/sdk/vala.bst
index b6f27cb0..5df93348 100644
--- a/elements/sdk/vala.bst
+++ b/elements/sdk/vala.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/vala.git
-  track: master
+- kind: tar
+  url: gnome_downloads:vala/0.52/vala-0.52.2.tar.xz
+  ref: 3a3c460803ba661e513be3d0984b583e05473f602c75fa98e91755503714a97b
 build-depends:
 - sdk/vala-tarball.bst
 - freedesktop-sdk.bst:components/bison.bst
diff --git a/elements/sdk/webkitgtk.bst b/elements/sdk/webkitgtk.bst
index a0861e40..19298b3b 100644
--- a/elements/sdk/webkitgtk.bst
+++ b/elements/sdk/webkitgtk.bst
@@ -3,6 +3,7 @@ kind: cmake
 sources:
 - kind: tar
   url: webkitgtk_org:webkitgtk-2.32.0.tar.xz
+  ref: 9d7df4dae9ada2394257565acc2a68ace9308c4c61c3fcc00111dc1f11076bf0
 - kind: local
   path: files/webkitgtk/toolchain.i686
 - kind: local
diff --git a/elements/sdk/woff2.bst b/elements/sdk/woff2.bst
index 85b36ced..77a8e299 100644
--- a/elements/sdk/woff2.bst
+++ b/elements/sdk/woff2.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:google/woff2/archive/v1.0.2.tar.gz
+  ref: add272bb09e6384a4833ffca4896350fdb16e0ca22df68c0384773c67a175594
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
 depends:
diff --git a/elements/sdk/wpebackend-fdo.bst b/elements/sdk/wpebackend-fdo.bst
index 4c92f089..c10ff2fb 100644
--- a/elements/sdk/wpebackend-fdo.bst
+++ b/elements/sdk/wpebackend-fdo.bst
@@ -2,8 +2,9 @@ kind: meson
 
 sources:
 - kind: tar
-  url: https://wpewebkit.org/releases/wpebackend-fdo-1.9.1.tar.xz
+  url: https://wpewebkit.org/releases/wpebackend-fdo-1.9.90.tar.xz
 
+  ref: 9d8330f54debb6273b432040dfde2b03e6eed8411dceda0093193a06276aba44
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 
diff --git a/elements/sdk/yelp-tools.bst b/elements/sdk/yelp-tools.bst
index 88ace901..66a4bc4d 100644
--- a/elements/sdk/yelp-tools.bst
+++ b/elements/sdk/yelp-tools.bst
@@ -1,8 +1,8 @@
 kind: meson
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/yelp-tools.git
-  track: master
+- kind: tar
+  url: gnome_downloads:yelp-tools/40/yelp-tools-40.0.tar.xz
+  ref: 664bacf2f3dd65ef00a43f79487351ab64a6c4c629c56ac0ceb1723c2eb66aae
 build-depends:
 - freedesktop-sdk.bst:components/m4.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/sdk/yelp-xsl.bst b/elements/sdk/yelp-xsl.bst
index 4abcee4e..bbaf252d 100644
--- a/elements/sdk/yelp-xsl.bst
+++ b/elements/sdk/yelp-xsl.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/yelp-xsl.git
-  track: master
+- kind: tar
+  url: gnome_downloads:yelp-xsl/40/yelp-xsl-40.0.tar.xz
+  ref: 361ecd4d33fccdb3bb08a687f60e5c3e909d2e9e3b022d844e049820d0cf62b0
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/sdk/yelp.bst b/elements/sdk/yelp.bst
index 0f4a5840..96eb9d41 100644
--- a/elements/sdk/yelp.bst
+++ b/elements/sdk/yelp.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/yelp.git
-  track: master
+- kind: tar
+  url: gnome_downloads:yelp/40/yelp-40.0.tar.xz
+  ref: 07775fa06cd28365ecd829bb16a85a682897ab21d8cce34596bbef5cd455aae0
 build-depends:
 - sdk/appstream-glib.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/zenity.bst b/elements/sdk/zenity.bst
index be87c9d0..9e6d7036 100644
--- a/elements/sdk/zenity.bst
+++ b/elements/sdk/zenity.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-- kind: git_tag
-  url: gitlab_gnome_org:GNOME/zenity.git
-  track: master
+- kind: tar
+  url: gnome_downloads:zenity/3.32/zenity-3.32.0.tar.xz
+  ref: e786e733569c97372c3ef1776e71be7e7599ebe87e11e8ad67dcc2e63a82cd95
 build-depends:
 - sdk/yelp-tools.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/vm/android-udev-rules.bst b/elements/vm/android-udev-rules.bst
index 8cff8124..bb273b0f 100644
--- a/elements/vm/android-udev-rules.bst
+++ b/elements/vm/android-udev-rules.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:M0Rf30/android-udev-rules/archive/20201003.tar.gz
 
+  ref: 79c5e9291763ed0520e179f75f14668c5823ef1bdac968d402160d7f823b7b96
 build-depends:
 - freedesktop-sdk.bst:components/pkg-config.bst
 - freedesktop-sdk.bst:components/systemd.bst
@@ -13,5 +14,7 @@ depends:
 
 config:
   install-commands:
-  - install -Dm 644 android-udev.conf -t %{install-root}$(pkg-config systemd --variable sysusersdir)
-  - install -Dm 644 51-android.rules -t %{install-root}$(pkg-config udev --variable udevdir)/rules.d
+  - install -Dm 644 android-udev.conf -t %{install-root}$(pkg-config systemd --variable
+    sysusersdir)
+  - install -Dm 644 51-android.rules -t %{install-root}$(pkg-config udev --variable
+    udevdir)/rules.d
diff --git a/elements/vm/buildstream/arpy.bst b/elements/vm/buildstream/arpy.bst
index 3be3397d..15a0dcad 100644
--- a/elements/vm/buildstream/arpy.bst
+++ b/elements/vm/buildstream/arpy.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/a9/47/505af0c53c8aaf028b67c76e994de3939672757f262826655de344a174dd/arpy-2.1.0.tar.gz
 
+  ref: 332d0fb6e96d497ad8746c61e586206f8718c217e39cf98fe50ec23d3f36d755
 build-depends:
 - freedesktop-sdk.bst:components/python3-setuptools.bst
 
diff --git a/elements/vm/buildstream/breezy.bst b/elements/vm/buildstream/breezy.bst
index 4862c42f..ccc8ae84 100644
--- a/elements/vm/buildstream/breezy.bst
+++ b/elements/vm/buildstream/breezy.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://launchpad.net/brz/3.1/3.1.0/+download/breezy-3.1.0.tar.gz
 
+  ref: 1eff207403f48898fa3b3ffa7a4275197c6c58fec105ef267caf1f5fd5a6c7be
 build-depends:
 - freedesktop-sdk.bst:components/python3-setuptools.bst
 
diff --git a/elements/vm/buildstream/bst-external.bst b/elements/vm/buildstream/bst-external.bst
index 2194b2c9..f0da702f 100644
--- a/elements/vm/buildstream/bst-external.bst
+++ b/elements/vm/buildstream/bst-external.bst
@@ -5,6 +5,7 @@ sources:
   url: https://gitlab.com/BuildStream/bst-external.git
   track: 0.21.0
 
+  ref: 0.21.0-0-gd00bc2a0442ea6a33ef81ed0c5f4515d11274237
 build-depends:
 - freedesktop-sdk.bst:components/python3-setuptools-scm.bst
 
diff --git a/elements/vm/buildstream/buildstream.bst b/elements/vm/buildstream/buildstream.bst
index 0349f2a1..7b9c3337 100644
--- a/elements/vm/buildstream/buildstream.bst
+++ b/elements/vm/buildstream/buildstream.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://download.gnome.org/sources/BuildStream/1.6/BuildStream-1.6.1.tar.xz
 
+  ref: 2ba614e13c0641c28e27dc3c41e5b2418e729a9e39ffc06064b8b713390a6b5c
 depends:
 - sdk-deps/bubblewrap.bst
 - vm/buildstream/pytest-runner.bst
diff --git a/elements/vm/buildstream/click.bst b/elements/vm/buildstream/click.bst
index 1df2ddd1..c0aa7eff 100644
--- a/elements/vm/buildstream/click.bst
+++ b/elements/vm/buildstream/click.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/27/6f/be940c8b1f1d69daceeb0032fee6c34d7bd70e3e649ccac0951500b4720e/click-7.1.2.tar.gz
 
+  ref: d2b5255c7c6349bc1bd1e59e08cd12acbbd63ce649f2588755783aa94dfb6b1a
 build-depends:
 - freedesktop-sdk.bst:components/python3-setuptools.bst
 
diff --git a/elements/vm/buildstream/grpcio.bst b/elements/vm/buildstream/grpcio.bst
index 1c1b85a3..27024dc4 100644
--- a/elements/vm/buildstream/grpcio.bst
+++ b/elements/vm/buildstream/grpcio.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/5e/29/1bd649737e427a6bb850174293b4f2b72ab80dd49462142db9b81e1e5c7b/grpcio-1.30.0.tar.gz
 
+  ref: e8f2f5d16e0164c415f1b31a8d9a81f2e4645a43d1b261375d6bab7b0adf511f
 depends:
 - freedesktop-sdk.bst:components/python3.bst
 
diff --git a/elements/vm/buildstream/pluginbase.bst b/elements/vm/buildstream/pluginbase.bst
index 48750943..9e1f7710 100644
--- a/elements/vm/buildstream/pluginbase.bst
+++ b/elements/vm/buildstream/pluginbase.bst
@@ -7,3 +7,4 @@ depends:
 sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/3d/3c/fe974b4f835f83cc46966e04051f8708b7535bac28fbc0dcca1ee0c237b8/pluginbase-1.0.0.tar.gz
+  ref: 497894df38d0db71e1a4fbbfaceb10c3ef49a3f95a0582e11b75f8adaa030005
diff --git a/elements/vm/buildstream/protobuf.bst b/elements/vm/buildstream/protobuf.bst
index 0abc24d6..9f4a6f7d 100644
--- a/elements/vm/buildstream/protobuf.bst
+++ b/elements/vm/buildstream/protobuf.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:protocolbuffers/protobuf/releases/download/v3.12.4/protobuf-all-3.12.4.tar.gz
 
+  ref: e7bf41873d1a87c05c2b0a6197f4445c6ea3469ce0165ff14de2df8b34262530
 build-depends:
 - freedesktop-sdk.bst:components/python3-setuptools.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/vm/buildstream/psutil.bst b/elements/vm/buildstream/psutil.bst
index 2f58ccb4..44da31c1 100644
--- a/elements/vm/buildstream/psutil.bst
+++ b/elements/vm/buildstream/psutil.bst
@@ -9,3 +9,4 @@ depends:
 sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/aa/3e/d18f2c04cf2b528e18515999b0c8e698c136db78f62df34eee89cee205f1/psutil-5.7.2.tar.gz
+  ref: 90990af1c3c67195c44c9a889184f84f5b2320dce3ee3acbd054e3ba0b4a7beb
diff --git a/elements/vm/buildstream/pytest-runner.bst b/elements/vm/buildstream/pytest-runner.bst
index 939f9080..dc3ccdc9 100644
--- a/elements/vm/buildstream/pytest-runner.bst
+++ b/elements/vm/buildstream/pytest-runner.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/5b/82/1462f86e6c3600f2471d5f552fcc31e39f17717023df4bab712b4a9db1b3/pytest-runner-5.2.tar.gz
 
+  ref: 96c7e73ead7b93e388c5d614770d2bae6526efd997757d3543fe17b557a0942b
 build-depends:
 - freedesktop-sdk.bst:components/python3-wheel.bst
 - freedesktop-sdk.bst:components/python3-setuptools-scm.bst
diff --git a/elements/vm/buildstream/python3-configobj.bst b/elements/vm/buildstream/python3-configobj.bst
index 3a6af69f..78bdacc6 100644
--- a/elements/vm/buildstream/python3-configobj.bst
+++ b/elements/vm/buildstream/python3-configobj.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/64/61/079eb60459c44929e684fa7d9e2fdca403f67d64dd9dbac27296be2e0fab/configobj-5.0.6.tar.gz
 
+  ref: a2f5650770e1c87fb335af19a9b7eb73fc05ccf22144eb68db7d00cd2bcb0902
 build-depends:
 - freedesktop-sdk.bst:components/python3-setuptools.bst
 
diff --git a/elements/vm/buildstream/python3-dulwich.bst b/elements/vm/buildstream/python3-dulwich.bst
index 2333c084..8107fcb1 100644
--- a/elements/vm/buildstream/python3-dulwich.bst
+++ b/elements/vm/buildstream/python3-dulwich.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/b3/34/adcd6646c5ed59a1206216d4a418121be57df3406f7a46570112db57ba6c/dulwich-0.20.5.tar.gz
 
+  ref: 98484ede022da663c96b54bc8dcdb4407072cb50efd5d20d58ca4e7779931305
 build-depends:
 - freedesktop-sdk.bst:components/python3-setuptools.bst
 
diff --git a/elements/vm/buildstream/python3-fastimport.bst b/elements/vm/buildstream/python3-fastimport.bst
index 1821ea08..5db79ca0 100644
--- a/elements/vm/buildstream/python3-fastimport.bst
+++ b/elements/vm/buildstream/python3-fastimport.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/aa/65/47a579aae80fbd8b89cfbdffcde8dff68d57e3148b99da6a326673021455/fastimport-0.9.8.tar.gz
 
+  ref: b2f2e8eb97000256e1aab83d2a0a053fc7b93c3aa4f7e9b971a5703dfc5963b9
 build-depends:
 - freedesktop-sdk.bst:components/python3-setuptools.bst
 
diff --git a/elements/vm/buildstream/python3-markupsafe.bst b/elements/vm/buildstream/python3-markupsafe.bst
index c0ae6325..e1892f33 100644
--- a/elements/vm/buildstream/python3-markupsafe.bst
+++ b/elements/vm/buildstream/python3-markupsafe.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/b9/2e/64db92e53b86efccfaea71321f597fa2e1b2bd3853d8ce658568f7a13094/MarkupSafe-1.1.1.tar.gz
 
+  ref: 29872e92839765e546828bb7754a68c418d927cd064fd4708fab9fe9c8bb116b
 build-depends:
 - freedesktop-sdk.bst:components/python3-setuptools.bst
 
diff --git a/elements/vm/buildstream/pytoml.bst b/elements/vm/buildstream/pytoml.bst
index aff21c4f..d1caff70 100644
--- a/elements/vm/buildstream/pytoml.bst
+++ b/elements/vm/buildstream/pytoml.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/f4/ba/98ee2054a2d7b8bebd367d442e089489250b6dc2aee558b000e961467212/pytoml-0.1.21.tar.gz
 
+  ref: 8eecf7c8d0adcff3b375b09fe403407aa9b645c499e5ab8cac670ac4a35f61e7
 build-depends:
 - freedesktop-sdk.bst:components/python3-setuptools.bst
 
diff --git a/elements/vm/buildstream/ruamel-yaml-clib.bst b/elements/vm/buildstream/ruamel-yaml-clib.bst
index 45be525c..a3a9c5e1 100644
--- a/elements/vm/buildstream/ruamel-yaml-clib.bst
+++ b/elements/vm/buildstream/ruamel-yaml-clib.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/fa/a1/f9c009a633fce3609e314294c7963abe64934d972abea257dce16a15666f/ruamel.yaml.clib-0.2.2.tar.gz
 
+  ref: 2d24bd98af676f4990c4d715bcdc2a60b19c56a3fb3a763164d2d8ca0e806ba7
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
 
diff --git a/elements/vm/buildstream/ruamel-yaml.bst b/elements/vm/buildstream/ruamel-yaml.bst
index 20f14283..c8c8f6a7 100644
--- a/elements/vm/buildstream/ruamel-yaml.bst
+++ b/elements/vm/buildstream/ruamel-yaml.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/17/2f/f38332bf6ba751d1c8124ea70681d2b2326d69126d9058fbd9b4c434d268/ruamel.yaml-0.16.12.tar.gz
 
+  ref: 076cc0bc34f1966d920a49f18b52b6ad559fbe656a0748e3535cf7b3f29ebf9e
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
 
diff --git a/elements/vm/buildstream/ujson.bst b/elements/vm/buildstream/ujson.bst
index 90f5fb4d..54ae648b 100644
--- a/elements/vm/buildstream/ujson.bst
+++ b/elements/vm/buildstream/ujson.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/b6/3f/66262b970bd7e9b536892219a71d3b1951b760f94320b7b0719295d3a7ae/ujson-3.0.0.tar.gz
 
+  ref: e0199849d61cc6418f94d52a314c6a27524d65e82174d2a043fb718f73d1520d
 build-depends:
 - freedesktop-sdk.bst:components/python3-setuptools-scm.bst
 
diff --git a/elements/vm/eos-repartition.bst b/elements/vm/eos-repartition.bst
index db4d4703..78ee17a7 100644
--- a/elements/vm/eos-repartition.bst
+++ b/elements/vm/eos-repartition.bst
@@ -3,6 +3,7 @@ kind: manual
 sources:
 - kind: tar
   url: github_com:endlessm/eos-boot-helper/archive/Release_3.7.7.tar.gz
+  ref: ec5184c02e3feb145c773e45e0f967280efd6038320bed85922b70b95654ff50
 - kind: patch
   path: files/vm/eos-repartition/fix-sector-size-issue.patch
 
diff --git a/elements/vm/fish.bst b/elements/vm/fish.bst
index d60c3624..de569235 100644
--- a/elements/vm/fish.bst
+++ b/elements/vm/fish.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:fish-shell/fish-shell/releases/download/3.1.2/fish-3.1.2.tar.gz
 
+  ref: d5b927203b5ca95da16f514969e2a91a537b2f75bec9b21a584c4cd1c7aa74ed
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
 
diff --git a/elements/vm/flathub-config.bst b/elements/vm/flathub-config.bst
index 06d95eb2..e984b51e 100644
--- a/elements/vm/flathub-config.bst
+++ b/elements/vm/flathub-config.bst
@@ -4,5 +4,6 @@ sources:
 - kind: remote
   url: https://flathub.org/repo/flathub.flatpakrepo
 
+  ref: 3371dd250e61d9e1633630073fefda153cd4426f72f4afa0c3373ae2e8fea03a
 config:
   target: /etc/flatpak/remotes.d/
diff --git a/elements/vm/git-lfs.bst b/elements/vm/git-lfs.bst
index a6f36220..d74ea0b7 100644
--- a/elements/vm/git-lfs.bst
+++ b/elements/vm/git-lfs.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:git-lfs/git-lfs/releases/download/v2.11.0/git-lfs-v2.11.0.tar.gz
 
+  ref: 8183c4cbef8cf9c2e86b0c0a9822451e2df272f89ceb357c498bfdf0ff1b36c7
 build-depends:
 - freedesktop-sdk.bst:components/go.bst
 - freedesktop-sdk.bst:components/which.bst
diff --git a/elements/vm/gnome-nightly-config.bst b/elements/vm/gnome-nightly-config.bst
index cc08288a..5c6c567d 100644
--- a/elements/vm/gnome-nightly-config.bst
+++ b/elements/vm/gnome-nightly-config.bst
@@ -4,5 +4,6 @@ sources:
 - kind: remote
   url: https://nightly.gnome.org/gnome-nightly.flatpakrepo
 
+  ref: 88cd4fccefc935bfad66870071cb7ff524329d9de488d0929dabc6144868cde5
 config:
   target: /etc/flatpak/remotes.d/
diff --git a/elements/vm/nss-mdns.bst b/elements/vm/nss-mdns.bst
index 9f63b6c7..9e7bfc47 100644
--- a/elements/vm/nss-mdns.bst
+++ b/elements/vm/nss-mdns.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: github_com:lathiat/nss-mdns/releases/download/v0.14.1/nss-mdns-0.14.1.tar.gz
 
+  ref: a2094101b735cade45048764ea594bdae2bfa9399837f3c852a5b264416e9c8c
 runtime-depends:
 - freedesktop-sdk.bst:components/avahi.bst
 
diff --git a/elements/vm/ntfs-3g.bst b/elements/vm/ntfs-3g.bst
index 49a031d9..d0dea1d9 100644
--- a/elements/vm/ntfs-3g.bst
+++ b/elements/vm/ntfs-3g.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: gnome_download:teams/releng/tarballs-needing-help/ntfs-3g/ntfs-3g_ntfsprogs-2017.3.23AR.5.tgz
 
+  ref: 04ccf583b495806cefb71850e5899e50aed5e7bf23365259f2badaa9af21e5ed
 depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
 
diff --git a/elements/vm/plymouth-gnome-theme.bst b/elements/vm/plymouth-gnome-theme.bst
index 789070f3..848e1398 100644
--- a/elements/vm/plymouth-gnome-theme.bst
+++ b/elements/vm/plymouth-gnome-theme.bst
@@ -6,6 +6,7 @@ sources:
 - kind: remote
   url: https://people.gnome.org/~engagement/logos/GnomeLogoHorizontal.svg
 
+  ref: 76654ecdc9cb8ab7acfe550f7e8a64fc41ea857850916c9975ee940efffab945
 runtime-depends:
 - core-deps/plymouth.bst
 
diff --git a/elements/vm/qemu-tools.bst b/elements/vm/qemu-tools.bst
index 81098f80..3b988002 100644
--- a/elements/vm/qemu-tools.bst
+++ b/elements/vm/qemu-tools.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://download.qemu.org/qemu-4.2.0.tar.xz
 
+  ref: d3481d4108ce211a053ef15be69af1bdd9dde1510fda80d92be0f6c3e98768f0
 depends:
 - sdk/glib.bst
 - freedesktop-sdk.bst:components/libcap.bst
diff --git a/elements/vm/spice-vdagent.bst b/elements/vm/spice-vdagent.bst
index dd1db8b4..6ef9ad31 100644
--- a/elements/vm/spice-vdagent.bst
+++ b/elements/vm/spice-vdagent.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://spice-space.org/download/releases/spice-vdagent-0.20.0.tar.bz2
+  ref: 2e6b7222675ee19ea38c52165abe4d836c2ac5d5bf902d4dfca13da1ec143359
 - kind: patch
   path: files/spice-vdagent/fix-shutdown-hang.patch
 
diff --git a/elements/vm/toolbox.bst b/elements/vm/toolbox.bst
index f35a6ac0..84cce7a2 100644
--- a/elements/vm/toolbox.bst
+++ b/elements/vm/toolbox.bst
@@ -3,87 +3,104 @@ kind: meson
 sources:
 - kind: tar
   url: https://github.com/containers/toolbox/releases/download/0.0.99.1/toolbox-0.0.99.1.tar.xz
+  ref: f0a8d25b3712ae8166445cd1595d05f68e64f27242979e3d9bac861a38db54ca
 - kind: git_tag
   url: https://github.com/HarryMichal/go-version.git
   track: v1.0.0
   track-tags: false
   directory: 'src/vendor/github.com/HarryMichal/go-version'
+  ref: v1.0.0-0-g55580acf86a8aaf1c30ad94a91cfd5dd90a6b222
 - kind: git_tag
   url: https://github.com/acobaugh/osrelease.git
   track: a93a0a55a249
   track-tags: false
   directory: 'src/vendor/github.com/acobaugh/osrelease'
+  ref: a93a0a55a24912e113e21f81971dc7248de7f6e2
 - kind: git_tag
   url: https://github.com/briandowns/spinner.git
   track: v1.10.0
   track-tags: false
   directory: 'src/vendor/github.com/briandowns/spinner'
+  ref: v1.10.0-0-gdb9a25053a700cbfa2b021429cd6146205028886
 - kind: git_tag
   url: https://github.com/docker/go-units.git
   track: v0.4.0
   track-tags: false
   directory: 'src/vendor/github.com/docker/go-units'
+  ref: v0.4.0-0-g519db1ee28dcc9fd2474ae59fca29a810482bfb1
 - kind: git_tag
   url: https://github.com/fsnotify/fsnotify.git
   track: v1.4.7
   track-tags: false
   directory: 'src/vendor/github.com/fsnotify/fsnotify'
+  ref: v1.4.7-0-gc2828203cd70a50dcccfb2761f8b1f8ceef9a8e9
 - kind: git_tag
   url: https://github.com/fatih/color.git
   track: v1.7.0
   track-tags: false
   directory: 'src/vendor/github.com/fatih/color'
+  ref: v1.7.0-0-g5b77d2a35fb0ede96d138fc9a99f5c9b6aef11b4
 - kind: git_tag
   url: https://github.com/godbus/dbus.git
   track: v5.0.3
   track-tags: false
   directory: 'src/vendor/github.com/godbus/dbus/v5'
+  ref: v5.0.3-0-g37bf87eef99d69c4f1d3528bd66e3a87dc201472
 - kind: git_tag
   url: https://github.com/inconshreveable/mousetrap.git
   track: v1.0.0
   track-tags: false
   directory: 'src/vendor/github.com/inconshreveable/mousetrap'
+  ref: v1.0-0-g76626ae9c91c4f2a10f34cad8ce83ea42c93bb75
 - kind: git_tag
   url: https://github.com/konsorten/go-windows-terminal-sequences.git
   track: v1.0.1
   track-tags: false
   directory: 'src/vendor/github.com/konsorten/go-windows-terminal-sequences'
+  ref: v1.0.1-0-g5c8c8bd35d3832f5d134ae1e1e375b69a4d25242
 - kind: git_tag
   url: https://github.com/mattn/go-colorable.git
   track: v0.1.2
   track-tags: false
   directory: 'src/vendor/github.com/mattn/go-colorable'
+  ref: v0.1.2-0-g8029fb3788e5a4a9c00e415f586a6d033f5d38b3
 - kind: git_tag
   url: https://github.com/mattn/go-isatty.git
   track: v0.0.8
   track-tags: false
   directory: 'src/vendor/github.com/mattn/go-isatty'
+  ref: v0.0.8-0-g1311e847b0cb909da63b5fecfb5370aa66236465
 - kind: git_tag
   url: https://github.com/sirupsen/logrus.git
   track: v1.4.2
   track-tags: false
   directory: 'src/vendor/github.com/sirupsen/logrus'
+  ref: v1.4.2-0-g839c75faf7f98a33d445d181f3018b5c3409a45e
 - kind: git_tag
   url: https://github.com/spf13/cobra.git
   track: v0.0.5
   track-tags: false
   directory: 'src/vendor/github.com/spf13/cobra'
+  ref: 0.0.5-0-gf2b07da1e2c38d5f12845a4f607e2e1018cbb1f5
 - kind: git_tag
   url: https://github.com/spf13/pflag.git
   track: v1.0.3
   track-tags: false
   directory: 'src/vendor/github.com/spf13/pflag'
+  ref: v1.0.3-0-g298182f68c66c05229eb03ac171abe6e309ee79a
 - kind: git_tag
   url: https://github.com/golang/crypto.git
   track: 505ab145d0a9
   track-tags: false
   directory: 'src/vendor/golang.org/x/crypto'
+  ref: 505ab145d0a99da450461ae2c1a9f6cd10d1f447
 - kind: git_tag
   url: https://github.com/golang/sys.git
   track: 953cdadca894
   track-tags: false
   directory: 'src/vendor/golang.org/x/sys'
 
+  ref: 953cdadca894cdc07be76fc99f95b40c28f06623
 build-depends:
 - freedesktop-sdk.bst:components/systemd.bst
 - freedesktop-sdk.bst:components/ca-certificates.bst
diff --git a/elements/vm/uresourced.bst b/elements/vm/uresourced.bst
index 7e07e2b9..f1023153 100644
--- a/elements/vm/uresourced.bst
+++ b/elements/vm/uresourced.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://gitlab.freedesktop.org/benzea/uresourced/-/archive/v0.3.0/uresourced-v0.3.0.tar.bz2
 
+  ref: 2b14ce1ec2faf3734c1dc93c343ef0b6c2638be0f5675ca63325748705f6c77b
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/project.conf b/project.conf
index 035e6263..b4dd126e 100644
--- a/project.conf
+++ b/project.conf
@@ -8,7 +8,7 @@ format-version: 14
 element-path: elements
 
 # Store source refs in central project.refs file
-ref-storage: project.refs
+ref-storage: inline
 
 # The uri to download built artifacts from for this project
 artifacts:
@@ -281,10 +281,10 @@ shell:
           path: /run/host/var
 
 variables:
-  branch: master
+  branch: '41'
   branch-nice-name: Nightly #Should be %{branch} if not master
   installer-volume-id: "GNOME-OS-%{branch-nice-name}-%{arch}"
-  qualifier: ''
+  qualifier: 'alpha'
   flatpak-branch: '%{branch}%{qualifier}'
   ostree-layer: user
   ostree-branch: "gnome-os/%{branch}/%{arch}-%{ostree-layer}"


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]